This vulnerability in Google Android involves missing permission checks in multiple files, which can result in local information disclosure across user accounts. Exploitation does not require user interaction or elevated privileges beyond local access. The CVSS 3.1 base score is 5.5, reflecting a medium severity with high confidentiality impact but no integrity or availability impact. Affected versions include Android 14, 15, 16, and 16-qpr2. No patch or vendor advisory is currently available to confirm remediation status.

An attacker with local access to an affected Android device could disclose sensitive information from other user accounts due to missing permission checks. This could compromise confidentiality but does not affect system integrity or availability. No additional privileges or user interaction are required for exploitation, increasing the risk of information leakage on multi-user devices.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local access to trusted users and monitor for updates from Google regarding patches or mitigations.