A high-severity local privilege escalation vulnerability in Google Android allows unauthenticated applications to gain unauthorized system access.

The flaw exists within the createRequest function of MediaProvider.java, where a logic error permits an application to access files without proper authorization. This vulnerability can be triggered by an unauthenticated local attacker without requiring user interaction.

Successful exploitation of this vulnerability results in a complete local elevation of privilege, which may allow an attacker to bypass security boundaries and manipulate system files. Given the CVSS score of 8.4, this poses a significant risk to data integrity and device security. Unauthorized access to system files could lead to full device compromise and the potential exfiltration of sensitive user data.

Immediate Action: Review the March 2026 Android Security Bulletin and apply the latest security patches provided by your device manufacturer or Google.

Proactive Monitoring: Monitor system logs for unusual file access patterns or unexpected errors originating from the MediaProvider service.

Compensating Controls: Ensure that all applications are installed from trusted sources and maintain strict permissions management to limit the potential impact of malicious apps.

Public Exploit Available: No

This vulnerability represents a significant security risk to the Android ecosystem by enabling local privilege escalation. Administrators and end users should prioritize the application of the March 2026 security updates as soon as they are available from their respective vendors to effectively mitigate this threat.