The vulnerability identified as CVE-2026-0145 affects the keymint component in Google Android. Due to a logic error, an attacker with local access can bypass permission checks, resulting in unauthorized disclosure of information. Exploitation does not require elevated privileges or user interaction. The vulnerability has been published but lacks a CVSS score and official remediation guidance at this time.

An attacker with local access to the affected Android device can exploit this logic error to bypass permission controls and gain access to sensitive information. No additional privileges or user interaction are needed, which increases the risk of information disclosure. However, there is no indication of remote exploitation or privilege escalation beyond information disclosure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor vendor communications for updates. No specific mitigations are provided by the vendor at this time.