The vulnerability resides in checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java and arises from improper input validation, creating a permission bypass. An attacker can trigger the activity to gain elevated permissions on the device without needing to execute code or obtain additional privileges. The flaw allows a local user to perform actions normally reserved for higher‑privileged system components, turning a normal user process into a privileged one.

This problem affects Android devices running any OS where CredentialStorageActivity is present. The advisory does not specify OS version numbers, so any device with the affected component is potentially vulnerable.

Based on the description, the likely attack vector is a local user invoking the activity, and no user interaction is required. The CVSS score of 7.8 indicates high severity, while the EPSS score of < 1% implies a low but non‑zero chance of exploitation. The vulnerability is not listed in CISA KEV, yet the lack of user interaction and the widespread presence of the component give it potential for significant local exploitation.