A local privilege escalation vulnerability in Google Android could allow an application to retain unauthorized privileges, potentially leading to a full system compromise.

This is an elevation of privilege vulnerability occurring in the DisassociationProcessor.java component. An attacker with low-level local access can exploit improper input validation to maintain persistent application privileges, bypassing standard disassociation security controls.

Successful exploitation of this vulnerability allows a malicious local application to gain elevated privileges on the affected device. Given the CVSS score of 7.3, this represents a high-severity risk that could lead to unauthorized data access, modification of system settings, and complete compromise of the device integrity.

Immediate Action: Apply the December 2025 Android Security Bulletin updates provided by Google to all affected devices.

Proactive Monitoring: Monitor system logs for unexpected privilege changes or anomalous behavior associated with companion applications.

Compensating Controls: Enforce strict application sandboxing policies and limit the installation of applications from untrusted sources to reduce the likelihood of a malicious actor gaining the necessary local access.

Public Exploit Available: Unknown.

The vulnerability poses a severe risk to device security by enabling unauthorized privilege persistence. Security teams should prioritize the deployment of the December 2025 security patches across all managed Android devices to remediate this flaw and prevent potential local exploitation.