Android Framework ChooserActivity Local Privilege Escalation Vulnerability

A vulnerability in the ChooserActivity component of the Android framework allows for local privilege escalation by improperly managing permissions related to user images. This issue arises from a confused deputy problem, where the application may inadvertently expose images from other users. Exploitation of this vulnerability does not require additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized access to other users' images, allowing for potential misuse or privacy violations.

Remediation

Users can update their devices to the April 2025 security patch level to address this vulnerability.