A critical local privilege escalation vulnerability in Google Android 13 and 14 allows an attacker to bypass device configuration restrictions and gain elevated access.

The vulnerability exists within the WifiScanModeActivity.java file due to a missing permission check, which enables a local attacker to bypass device configuration restrictions. This flaw permits local escalation of privilege without requiring specific execution privileges or user interaction.

Successful exploitation of this vulnerability grants a local attacker elevated system privileges, potentially leading to full device compromise. Given the CVSS score of 7.8, this represents a significant risk to data confidentiality, integrity, and availability for mobile deployments. Organizations should prioritize patching to prevent unauthorized access to sensitive corporate data stored on affected devices.

Immediate Action: Apply the latest Android security updates provided by the device manufacturer or Google as specified in the December 2025 security bulletin.

Proactive Monitoring: Monitor device audit logs for unusual process execution patterns or unauthorized attempts to modify system configuration settings.

Compensating Controls: Ensure that mobile device management (MDM) policies are strictly enforced to limit local application installation and restrict access to sensitive device functions.

Public Exploit Available: Unknown

This vulnerability poses a substantial risk to Android device integrity by enabling unauthorized privilege escalation. Administrators should expedite the deployment of the December 2025 security patches across their fleet to mitigate the threat of local exploitation.