Android Permission Controller GrantPermissionsActivity Elevation of Privilege Vulnerability

A vulnerability has been identified in the GrantPermissionsActivity.java file of the Android Permission Controller module. This issue allows for a local elevation of privilege by misleading users into granting incorrect permissions, a consequence of permission overload. Notably, exploitation of this vulnerability does not require any additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized privileges being granted to an application, allowing it to perform actions or access resources that would normally be restricted.

Remediation

Users can update their devices to the May 2025 security patch level to address this vulnerability.