Android Framework and System Sensitive Information Disclosure Vulnerability via Permissions Bypass

A vulnerability allowing sensitive information disclosure has been identified in the Android Framework and System components. This issue arises from a permissions bypass in the AdapterService.java file, specifically in the handleBondStateChanged function. The vulnerability could lead to local information disclosure without requiring additional execution privileges or user interaction for exploitation. All Android versions through 16-qpr2 are affected.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information.

Remediation

Users can update their devices to the June 2026 security patch level to address this vulnerability.