Android Content Protection Toggle Preference Controller Privilege Escalation Vulnerability

A logic error in the ContentProtectionTogglePreferenceController component of the Android Settings app allows a secondary user to disable the primary user's deceptive app scanning setting. This vulnerability could lead to local privilege escalation without requiring additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized changes to the content protection settings, potentially allowing malicious apps to evade detection by the deceptive app scanning feature.

Remediation

Users can update their devices to the May 2025 security patch level to address this vulnerability.