Description
In multiple locations, there is a possible way to reveal images across users due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Android | 17, 16-qpr2, 16, 15, 14 | — |
Advisories 6
- WID-SEC-2026-4288 Android Patchday November 2026 (Google Android, Automotive OS and XR): Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 10, 2026
- NCSC-2026-0467 Kwetsbaarheden verholpen in Google Android en Samsung Mobile NCSC-NL (Netherlands) · Nov 5, 2026
- NCSC-2026-0173 Kwetsbaarheden verholpen in Google Android en Samsung Mobile NCSC-NL (Netherlands) · Jun 2, 2026
- WID-SEC-2026-1772 Google Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 1, 2026
- WID-SEC-2025-0723 Android Patchday April 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 1, 2026
- WID-SEC-2026-0974 Samsung Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 1, 2026