Skip to content
OpenAdvisories
High · 7.8 CVE-2023-40132 EUVD-2023-44739GHSA-j67w-4gh2-w3jq

In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permissions due to a missi…

Published Jan 21, 2025 · Updated Jun 18, 2026 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 17 —

Advisories 4

References