CVE-2025-20954

Name of the Vulnerable Software and Affected Versions EnrichedCall versions prior to SMR May-2025 Release 1

Description The issue concerns the use of implicit intent for sensitive communication in EnrichedCall, allowing local attackers to access sensitive information. User interaction is required to trigger this issue.

Recommendations For versions prior to SMR May-2025 Release 1, consider restricting access to sensitive information within the EnrichedCall feature until a patch is available. As a temporary workaround, consider disabling the use of implicit intent for sensitive communication in EnrichedCall to minimize the risk of exploitation.