Android Companion Component Elevation of Privilege Vulnerability

A vulnerability has been identified in the DeviceId component of DeviceId.java, where a possible desynchronization in data persistence arises from a missing bounds check. This flaw could enable local elevation of privilege, allowing a user to gain unauthorized rights or access, without the need for additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized access or rights, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the March 2026 security patch level to address this vulnerability.