A logic error in the Android operating system allows a user to bypass permission checks, enabling local privilege escalation. The flaw permits any local user to run code with higher privileges without the need for additional execution rights or user interaction. This type of weakness can allow attackers to gain access to protected system resources or modify system configuration, effectively compromising the device's security posture.

The vulnerability affects Google Android devices. Specific affected versions are not listed in the available data, so the scope may include multiple releases until a patch is issued.

The EPSS score of <1% indicates a low probability of exploitation, yet the lack of user interaction and the local privilege escalation nature make it highly actionable for local users. The CVSS score of 7.8 highlights a moderate‑to‑high severity, and because the vulnerability is not listed in the CISA KEV catalog, the threat remains persistent until a vendor patch is released. Attackers can leverage this flaw from any local account, making the danger visible until an official update arrives. The attack vector is inferred to be a local user with device access.