Android PackageInstallerService Elevation of Privilege Vulnerability

A vulnerability in the PackageInstallerService component of Android allows for the installation of unverified applications. This issue arises from a missing permission check in several functions of PackageInstallerService.java. Exploiting this vulnerability could lead to local elevation of privilege, with no additional execution privileges required. User interaction is not necessary for exploitation.

Impact

Exploitation of this vulnerability could result in unauthorized privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the June 2026 security patch level to address this vulnerability.