Android Framework Companion Device Notification Access Vulnerability Allowing Privilege Escalation

A vulnerability has been identified in the Android Framework's DisassociationProcessor component, specifically within the notification management for companion devices. Due to inadequate input validation, an application may improperly retain access to notifications even when it is not connected to a companion device. This flaw could facilitate a local escalation of privileges, as no additional execution rights are required for exploitation. Notably, user interaction is also unnecessary.

Impact

Exploitation of this vulnerability could lead to unauthorized access to notification data, potentially allowing an application to escalate its privileges on the device.

Remediation

Users can update their devices to the December 2025 security patch level to address this vulnerability.