Android Voice Interaction Manager Service Default Speech Recognizer Privilege Escalation Vulnerability

A vulnerability in the VoiceInteractionManagerService component of Android allows for local privilege escalation by exploiting an insecure default value in the speech recognizer app settings. This issue does not require any additional execution privileges or user interaction to be exploited.

Impact

Exploitation of this vulnerability could lead to unauthorized privileges being granted to the user, allowing them to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the December 2025 security patch level to address this vulnerability.