Android Framework Information Disclosure Vulnerability via Missing Permission Check

Vulnerability

A vulnerability allowing file access from another user has been identified in the Android Framework. This issue arises from a missing permission check in multiple locations, potentially leading to unauthorized local information disclosure. The vulnerability does not require additional execution privileges and can be exploited without user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized access to files, leading to local information disclosure.

Remediation

Users can update to the December 2025 security patch level to address this vulnerability.

Added: Dec 8, 2025, 5:47 PM
Updated: Dec 8, 2025, 9:18 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
5.3
remediation
0.0
relevance
1.3
threat
3.2
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.