A vulnerability in the setOemUnlockAllowedByUser method of OemLockService.java allows bypassing Factory Reset Protection (FRP) due to a missing permission check. This flaw enables local privilege escalation without requiring additional execution privileges or user interaction.