A high-severity local privilege escalation vulnerability exists in Google Android, enabling attackers to gain elevated system access without user interaction.

The flaw resides in the checkPermissions method within SafeActivityOptions.java, where a logic error permits background activity execution by an attacker with low local privileges, requiring no additional permissions or user interaction.

Successful exploitation of this vulnerability allows a local attacker to escalate their privileges, potentially gaining full control over the device or sensitive user data. With a CVSS score of 7.8, this represents a significant security risk to mobile fleets and personal devices, as it facilitates unauthorized access to restricted system functions and information.

Immediate Action: Update all affected Android devices to the latest security patch level provided by the vendor in the September 2025 Android Security Bulletin.

Proactive Monitoring: Monitor device logs for anomalous activity or unauthorized application behavior that may indicate an attempt to exploit background activity launch mechanisms.

Compensating Controls: Ensure that third-party applications are sourced only from trusted repositories and maintain strict device management policies to limit the installation of untrusted software.

Public Exploit Available: No (exploit_available: false)

Given the potential for complete local privilege escalation, organizations and users should treat this vulnerability with high urgency. It is critical to deploy the September 2025 security updates to all supported Android devices as soon as they become available from the respective hardware manufacturers to mitigate the risk of unauthorized system access.