Android Framework Header Privacy Icons Controller Elevation of Privilege Vulnerability

A logic error in the HeaderPrivacyIconsController.kt file of the Android Framework allows for the unauthorized granting of permissions between users. This vulnerability could lead to local elevation of privilege, requiring no additional execution privileges or user interaction for exploitation. The issue affects Android versions 13, 14, 15, and 16.

Impact

Exploitation of this vulnerability could result in unauthorized permission grants between users, allowing for elevated privileges.

Remediation

Users can update their devices to the December 2025 security patch level to address this vulnerability.