Android Information Disclosure Vulnerability in Service Listing Component

A logic error in the ServiceListing component of Android allows a malicious app to conceal a Network Location Service (NLS) entry from the device's Settings. This vulnerability could lead to unauthorized local access to information, without requiring additional execution privileges or user interaction for exploitation. The issue affects several different versions of Android.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure by allowing a malicious app to hide NLS entries from the user.

Remediation

Users can update their devices to the January 2025 security patch level to address this vulnerability.