Android Framework Information Disclosure Vulnerability via Missing Permission Check
Vulnerability
A vulnerability allowing file access from another user has been identified in the Android Framework. This issue arises from a missing permission check in multiple locations, potentially leading to unauthorized local information disclosure. The vulnerability does not require additional execution privileges and can be exploited without user interaction.
Impact
Exploitation of this vulnerability could result in unauthorized access to files, leading to local information disclosure.
Remediation
Users can update to the December 2025 security patch level to address this vulnerability.
Added: Dec 8, 2025, 5:47 PM
Updated: Dec 8, 2025, 9:18 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
5.3remediation
0.0relevance
1.3threat
3.2urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
