Android App Search Background Activity Launch Vulnerability Allowing Privilege Escalation

A vulnerability in the App Search module's AppSearchManagerService has been identified, where a background activity can be unintentionally launched due to a logic error. This flaw allows for local escalation of privilege without requiring additional execution privileges or user interaction. The issue arises from a hidden API that can be invoked by an attacker, exploiting the bug by bypassing intended safeguards.

Impact

Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the September 2025 security patch level to address this vulnerability.