Android Framework SELinux Bypass Vulnerability Allowing Privilege Escalation

A logic error in the Android framework's service manager can create a potential SELinux bypass. This vulnerability allows for local privilege escalation without requiring additional execution privileges or user interaction. The issue affects Android versions 12, 12L, 13, 14, and 15.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation within the Android operating system.

Remediation

Users can update to the March 2025 security patch level to address this vulnerability. Instructions for checking and updating the Android version are available on the Google Support website.