Android NlpService Information Disclosure Vulnerability Allowing Privilege Escalation

A vulnerability in the NlpService component of Android allows for unauthorized access to location information due to a lack of proper permission checks. This flaw could be exploited to escalate privileges locally, without requiring additional execution rights or user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized access to location data and allow for local privilege escalation.

Remediation

Users can update their devices to the June 2018 security patch level to address this vulnerability.