Android KeyChainActivity Misleading UI Vulnerability Leading to Privilege Escalation

A vulnerability has been identified in the KeyChainActivity.java file, specifically in the getApplicationLabel function. This issue arises from the potential to mislead users into granting access to certificates, creating a risk of local privilege escalation. Notably, this vulnerability does not require any additional execution privileges and can be exploited without user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized elevation of privileges, allowing a user to gain access to restricted resources or functions.

Remediation

Users can update their devices to the June 2026 security patch level to address this vulnerability.