← Back to search

CVE-2026-45524

8.8 HIGH

Published 2026-10-05 · Updated 2026-10-07

AI risk analysis

Summary
The flaw in WifiPermissionsUtil.java allows for a local privilege escalation due to a missing permission check, potentially enabling an attacker to gain higher privileges without additional execution rights.
Exploitability
Exploitation requires local access and the absence of a proper permission check, making it moderately easy for an attacker with local user rights.
Blast radius
If exploited, the impact could be significant, as it allows for local escalation of privilege, potentially leading to full system control.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to the latest version of the affected software, ensuring all security patches are applied.
local-priv-escalpermission-checkwifijava

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-862

Vendors

google

Products

android

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.