This vulnerability involves a component of the Motorola Setup App being exported without the necessary permission checks, enabling an attacker with limited privileges to revoke runtime permissions from other applications. The CVSS 4.0 base score is 4.8, reflecting a local attack vector with low complexity and no user interaction required. The flaw impacts versions of the Setup App prior to 2026-01-01. There is no indication of known exploits in the wild or an available patch at this time.

An attacker with limited privileges on the device could exploit this vulnerability to revoke runtime permissions from other installed applications. This could disrupt app functionality or degrade security controls that rely on those permissions. There is no evidence of remote exploitation or privilege escalation beyond the attacker's existing privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit untrusted app installations and monitor for suspicious app behavior related to permission changes.