CVE-2026-0055: Path Traversal
In createSessionInternal of PackageInstallerService.java, there is a possible to update a Device Policy Controller (DPC) into an invalid directory due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
Devices are exposed where the affected PackageInstallerService code permits a session to update a Device Policy Controller into an invalid directory. Exploitation is local and does not require user interaction or additional execution privileges.
How can I determine whether a device is affected?
The issue affects Device Policy Controller updates handled by createSessionInternal in PackageInstallerService.java. The provided data does not identify affected Android versions, build identifiers, or a configuration-based detection method.
What can be done if an update cannot be applied immediately?
No workaround or mitigation is provided in the available information. Review the referenced Android security bulletin for vendor remediation and update guidance.