In the resolveAidConflictLocked function of Android's RegisteredAidCache.java, a permission bypass arises from a confused‑deputy flaw. The flaw allows a local user to acquire higher privileges without needing additional execution rights. Exploitation does not require user interaction and can result in full system compromise if the attacker gains control of privileged APIs.

This vulnerability affects Android devices released by Google. No specific model or OS version is listed in the available data, so all Android releases potentially impacted before a patch are considered vulnerable.

The vulnerability carries a CVSS score of 8.4, indicating high severity. EPSS information is not available, and the issue is not currently listed in the CISA KEV catalog. Because the exploit is local and requires no user interaction, an attacker with physical or local access can execute it directly. While the lack of EPSS data limits precise exploitation probability assessment, the high CVSS and local nature suggest a significant risk to affected devices.