A permission check failure in checkNearbyDevicesPermission of WifiP2pServiceImpl.java allows a confused deputy scenario that bypasses required permissions, leading to local disclosure of sensitive information. No user interaction or elevated privileges are needed, enabling any application on the device to exploit the flaw directly and compromise confidentiality.

Google's Android operating system is the affected platform. The specific Android releases and build versions impacted are not disclosed in the current advisory, but the issue originates in the core WifiP2pServiceImpl component, which is present across all Android devices supporting Wi‑Fi Peer‑to‑Peer functionality.

The vulnerability is categorized as a local information disclosure with no exploitation prerequisites. While the EPSS score is not available and the vulnerability has not been listed in the CISA KEV catalog, the lack of user interaction and the wide presence of WifiP2pServiceImpl in Android suggest a moderate risk for devices that do not apply future patches. Attacks would target the device locally, potentially leveraging malicious or compromised apps to read privileged data.