A critical local privilege escalation vulnerability exists in Google Android due to improper overlay handling that allows attackers to bypass security controls.

This flaw exists within the ControlsSettingsDialogManager.kt file, where an improper implementation allows for a tapjacking or overlay attack. An attacker with local access can exploit this to achieve elevation of privilege without requiring additional execution permissions or user interaction.

The ability to escalate privileges locally poses a severe risk to device integrity and user data privacy. A successful exploit could allow a malicious application to gain elevated system permissions, potentially leading to unauthorized access to sensitive data, full system compromise, or the installation of persistent malicious software. Given the CVSS score of 7.8, this vulnerability is classified as High severity and requires prompt attention from device administrators and security teams.

Immediate Action: Apply the September 2025 Android security updates provided by Google or your device manufacturer immediately.

Proactive Monitoring: Monitor device logs for unusual system service behavior or unexpected dialog overlays that occur without clear user intent.

Compensating Controls: Ensure that third party application installation is restricted to trusted sources, such as the official Google Play Store, to reduce the likelihood of malicious apps being present on the device.

Public Exploit Available: No

This vulnerability represents a significant security risk for Android users due to the potential for privilege escalation and the lack of required user intervention. Security teams and individual users should prioritize the deployment of the September 2025 security patch to ensure that the vulnerable ControlsSettingsDialogManager component is properly hardened. Failure to patch may leave devices susceptible to local compromise by malicious applications.