Android Framework Audio File Permission Confusion Vulnerability Allowing Privilege Escalation

A vulnerability exists in the Android Framework that can lead to the unauthorized access of audio files across different user profiles. This issue arises from a 'confused deputy' scenario, where permissions are not properly enforced, potentially allowing a malicious application to access files it shouldn't. Exploitation of this vulnerability could result in local escalation of privileges, with no additional execution rights required. The flaw affects multiple versions of the Android Framework.

Impact

Exploitation of this vulnerability could lead to unauthorized access to audio files across user profiles, allowing for local escalation of privileges.

Remediation

Users can update their devices to the December 2025 security patch level to address this vulnerability.