Android Wi-Fi Hotspot Activation Privilege Escalation Vulnerability

A vulnerability in the Wi-Fi service implementation allows for the activation of a Wi-Fi hotspot from a non-owner profile. This issue arises from a missing permission check, which could lead to local privilege escalation without requiring additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized activation of the Wi-Fi hotspot feature, potentially leading to unauthorized network access or data interception.

Remediation

Users can update their devices to the June 2018 security patch level to address this vulnerability.