A high-severity local privilege escalation vulnerability in Google Android allows attackers to retain unauthorized associations, potentially leading to a full compromise of system security.

This vulnerability occurs within the setDisplayName function of AssociationRequest.java, where improper input validation allows Companion Device Manager (CDM) associations to persist after a user has attempted to remove them. An attacker with local access can exploit this flaw to achieve elevation of privilege without requiring additional execution permissions or user interaction.

The ability for an unauthorized local entity to maintain persistent access and escalate privileges poses a significant threat to device integrity. Successful exploitation could lead to unauthorized data access, the circumvention of security policies, and total compromise of the affected device. With a CVSS score of 7.8, this vulnerability represents a high risk that necessitates prompt attention to prevent unauthorized administrative control.

Immediate Action: Apply the official security updates provided in the December 2025 Android Security Bulletin to all affected devices.

Proactive Monitoring: Monitor system logs for unusual activity related to companion device associations or unexpected changes in user permissions.

Compensating Controls: Ensure that device policies restrict non-essential local access and maintain strict control over which applications are permitted to request companion device pairings.

Public Exploit Available: Unknown

Given the severity of this elevation of privilege flaw, organizations and individual users should prioritize the deployment of the December 2025 security patches. Failure to remediate this issue leaves devices vulnerable to persistent unauthorized access by local malicious actors. Regular patching cycles are essential to maintaining the security posture of the Android ecosystem against such systemic vulnerabilities.