Android Framework BaseBundle Elevation of Privilege Vulnerability

A logic error in multiple functions of BaseBundle.java creates a vulnerability that allows arbitrary code execution. This issue could lead to local elevation of privilege, requiring no additional execution privileges or user interaction for exploitation. The vulnerability affects Android devices with security patch levels prior to 2025-12-01.

Impact

Exploitation of this vulnerability could result in unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the December 2025 security patch level to address this vulnerability.