Description
In onCreate of ChooserActivity.java , there is a possible way to view other users' images due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Problem types
Elevation of privilege
Product status
15
14
13
References
android.googlesource.com/...b7da3dbbc2f19c869b4ded106e140452
source.android.com/security/bulletin/2025-04-01
