Android Notification Access Privilege Escalation Vulnerability

A vulnerability in the Notification Access Confirmation Activity allows an app with notification access to be hidden in the Settings. This issue arises from a missing permission check, which could lead to local privilege escalation without requiring additional execution privileges. Exploitation of this vulnerability does require user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized access to notification features, potentially allowing a malicious app to manipulate or intercept notifications without the user's knowledge.

Remediation

Users can update their devices to the January 2025 security patch level to address this vulnerability.