Android Framework Companion App Privilege Retention Vulnerability in Disassociation Process

A vulnerability exists in the Android Framework's DisassociationProcessor component, specifically in the onUidImportance function. This issue allows for the improper validation of input, potentially enabling a companion application to retain privileges after disassociation. As a result, this could lead to unauthorized elevation of privileges on the device. Exploitation of this vulnerability requires user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized elevation of privileges, allowing a user to gain elevated rights or access on the device.

Remediation

Users can update their devices to the December 2025 security patch level to address this vulnerability.