Android Permission Controller Elevation of Privilege Vulnerability

A logic error in the Android Permission Controller allows for the potential acquisition of any system permission. This vulnerability could lead to local elevation of privilege, requiring user interaction for exploitation. It affects multiple Android versions, including 12, 12L, 13, 14, and 15.

Impact

Exploitation of this vulnerability could result in unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the January 2025 security patch level to address this vulnerability. Instructions for checking and updating the Android version are available on the Google Support website.