Executive brief
A vulnerability in the Android operating system's carrier configuration component could allow a malicious application to bypass security checks. This could enable an attacker to gain higher system privileges than intended without any interaction from the user. Such an exploit could compromise the integrity of the device and lead to unauthorized access to sensitive system functions.
Technical details
A permissions bypass vulnerability exists in the 'overrideConfig' method of 'CarrierConfigLoader.java' within the Android System component. The flaw stems from a missing authorization check (CWE-862) that allows a local attacker to bypass UID verification. Successful exploitation enables local escalation of privilege (EoP) without requiring additional execution privileges or user interaction. The issue is addressed in Android 17 with security patch levels of 2026-07-01 or later.
Affected products
- Google Android 17
Timeline
- 2026-06-16: advisory: Initial Android security bulletin published
- 2026-06-17: disclosed: NVD publication date