Google Android Elevation of Privilege Vulnerability (CNVD-2022-63884)

Google Android is a Linux-based operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android versions 12 and 12L. The vulnerability stems from a logic error in the PermissionController component code, and there is a possible way to gain and retain privileges without user consent. There is a possible way to gain and retain privileges without user consent. An attacker could exploit this vulnerability to cause a local escalation of privileges without requiring additional executive privileges.