Android Permission Persistence Vulnerability Leading to Local Privilege Escalation
Vulnerability
A vulnerability exists in multiple Android components that may cause a failure to properly maintain permission settings, potentially due to resource exhaustion. This issue could allow for local privilege escalation without requiring additional execution privileges or user interaction.
Impact
Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.
Remediation
Users can update their devices to the January 2025 security patch level to address this vulnerability. Instructions for checking and updating the Android version are available on the Google Support website.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
