This vulnerability arises from improper input validation in several functions of Helpers.java, enabling an unprivileged local user to retrieve sensitive data that should remain confidential. The issue does not require creation of new privileges or execution of arbitrary code; merely interacting with the vulnerable functions can reveal information. The exposed data originates from local inputs processed by the affected code paths.

Google Android systems that include the vulnerable implementation of Helpers.java are impacted. No specific Android version range is listed, but any build containing the affected code is susceptible.

The CVSS score is not reported, the EPSS score is not available, and the vulnerability is not catalogued in the CISA KEV list. Exploitation can occur while the device is in use, with no need for user interaction or elevated privileges. The risk is therefore moderate, confined to local disclosure, with no known public exploitation at this time.