Android Permission Controller Elevation of Privilege Vulnerability

A logic error in the Permissions.java file of the Android Permission Controller module could allow unauthorized modification of user location permissions. This vulnerability enables local elevation of privilege, requiring no additional execution rights or user interaction for exploitation.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in location permission settings, potentially allowing apps to access location data without user consent.

Remediation

Users can update their devices to the April 2025 security patch level to address this vulnerability.