Android Telecomm Connection Service Wrapper Elevation of Privilege Vulnerability

A logic error in the ConnectionServiceWrapper component of the Android Telecomm service can lead to a vulnerability allowing permissions to be retained indefinitely in the background. This issue could result in local elevation of privilege, with no additional execution privileges required. Exploitation of this vulnerability does necessitate user interaction.

Impact

Exploitation of this vulnerability allows for local elevation of privilege, enabling a user to gain unauthorized access to elevated permissions or privileges within the system.

Reproduction

The vulnerability can be reproduced by binding a connection service and not creating a connection or conference within 15 seconds. This delay allows the service to retain a permission indefinitely in the background, creating a potential for privilege escalation.

Remediation

Users can update their devices to the April 2025 security patch level to address this vulnerability.