A logic error in onNullBinding of HostEmulationManager.java allows an app to launch an activity from the background. This behavior can lead to a local privilege escalation attack with no need for additional execution privileges. The exploitation requires user interaction, meaning a user must be prompted or interact with the device for the attack to succeed.

The vulnerability affects Google Android devices running version 14.0, 15.0, 16.0, or the 16.0 qpr2 branch, targeting the HostEmulationManager component of the Android OS. All devices on those releases are potentially vulnerable unless the corresponding patch is applied.

The CVE is not listed in the CISA KEV catalog and an EPSS score of < 1% indicates a very low but non‑zero probability of exploitation. The CVSS score of 7.8 indicates a medium‑high severity local privilege escalation potential. Because the attack requires user interaction, the risk depends heavily on user behavior, but once triggered it could elevate attacker privileges on the device.