CVE-2025-26418

In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a managed device due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

PT-2026-45565

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A missing permission check in the setUserDisclaimerAcknowledged function of CarDevicePolicyService.java allows a bypass of the user dialog when adding an account to a managed device. This iss...