Android Framework URI Access Vulnerability in ComputerEngine.java Allowing Privilege Escalation

A logic error in the Android Framework's ComputerEngine.java file creates a vulnerability that allows unauthorized access to URIs across different users. This issue could lead to local privilege escalation without requiring additional execution privileges or user interaction. The vulnerability affects Android versions 14, 15, 16, and 16-qpr2.

Impact

Exploitation of this vulnerability could result in unauthorized access to user-specific URIs, potentially allowing a user to manipulate or access data belonging to another user, leading to unauthorized actions or data exposure.

Remediation

Users can update their devices to the June 2026 security patch level to address this vulnerability.