There is a possible permission bypass in Android caused by an uncaught exception. The flaw allows a local attacker to gain higher privileges without needing any additional execution privileges. Because the exception is unhandled, the operating system may skip critical permission checks, giving the attacker elevated access to system resources or applications. This is an example of improper access control that can directly increase compromise risk on a device. The issue maps to the error handling weakness identified by CWE-248.

The affected vendor is Google and the product is Android. No specific Android release or version information is provided in the available data.

The EPSS score is <1% and the CVSS score is 8.4, indicating a high severity. The vulnerability is not listed in CISA's KEV catalog. This flaw can be exploited locally without user interaction, making it a concern for devices that run potentially vulnerable applications. The lack of publicly known exploitation does not reduce the risk, as local privilege escalation can enable subsequent attacks if the device is compromised through other vectors.