Android Framework Media Browser Service Elevation of Privilege Vulnerability

Vulnerability

A logic error in the MediaBrowser component of the Android Framework allows for unauthorized access to 'while in use' permissions when the app is running in the background. This vulnerability could lead to local elevation of privilege, as it allows apps to access sensitive permissions without the user's knowledge or consent. The issue affects Android versions 13 through 16.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive permissions, allowing an app to perform actions or access data that it normally would not be permitted to.

Remediation

Users can update their devices to the December 2025 security patch level to address this vulnerability.

Added: Dec 8, 2025, 5:52 PM
Updated: Dec 8, 2025, 10:30 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
5.0
exploitability
5.3
remediation
0.0
relevance
1.3
threat
3.2
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.