Android Cross-User Media Read Vulnerability in Settings Provider

A cross-user media read vulnerability has been identified in the Android Settings Provider. This issue arises from a missing permission check in the 'isValidMediaUri' function of 'SettingsProvider.java', potentially allowing unauthorized access to media information across user profiles. The vulnerability could lead to local information disclosure without requiring additional execution privileges or user interaction for exploitation. This issue affects Android 16 QPR2 devices prior to the December 2025 security patch.

Impact

Exploitation of this vulnerability could result in unauthorized access to media information across user profiles, leading to potential privacy violations.

Remediation

Users can update their devices to the December 2025 security patch to address this vulnerability.