The vulnerability resides in the writeGrantedUriPermissions method of UriGrantsManagerService.java, where input validation is insufficient. A malicious application can exploit this flaw to bypass permission controls, thereby elevating its privileges locally without needing to execute additional code. The weakness enables the attacker to modify or grant URI permissions that would normally be restricted, potentially allowing access to sensitive data or system resources. This directly impacts system integrity and confidentiality, as the escalated privileges could be used to read, modify, or delete protected files and services.

The affected product is Android operating systems distributed by Google. No specific version range is listed, so all Android builds vulnerable to the flaw in UriGrantsManagerService may be affected.

The CVSS score is not provided, but the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. The lack of a user interaction requirement means the attack could be executed locally by a malicious application without user awareness. Given the local nature and absence of exploit code execution, the exploitation complexity appears low, but the impact is high due to full privilege escalation.