Description
In multiple locations, there is a possible way to view icons belonging to another user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Problem types
Information disclosure
Product status
15
14
13
References
android.googlesource.com/...eaf5f0452b93a650265ee432288c0978
source.android.com/security/bulletin/2025-09-01