Android Device Policy Manager Service Denial-of-Service Vulnerability Allowing Local Privilege Escalation

A denial-of-service vulnerability has been identified in the Device Policy Manager Service of Android. This issue arises from a logic error in the code, which can disrupt a device administrator's functions. Exploitation of this vulnerability could lead to unauthorized elevation of privileges, allowing a user to gain higher access rights without needing additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could cause a denial-of-service condition for a device administrator, potentially disrupting management functions and causing administrative tasks to fail.

Remediation

Users can update their devices to the September 2025 security patch level to address this vulnerability.