Android USB Data Access Race Condition Vulnerability Allowing Privilege Escalation

A race condition vulnerability has been identified in the UsbDataAdvancedProtectionHook.java file, allowing unauthorized access to USB data when the screen is off. This vulnerability could lead to local privilege escalation without requiring additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized access to USB data, potentially leading to local privilege escalation.

Remediation

Users can update to Android 16 QPR2 with a security patch level of 2025-12-01 or later to address this vulnerability.