Android Framework dumpBitmapsProto Missing Permission Check Local Privilege Escalation
CVE-2026-0047 is a critical Android Framework elevation-of-privilege vulnerability affecting Android 16-QPR2. The flaw is in dumpBitmapsProto in ActivityManagerService.java, where a missing permission check allows an application to access private information it should not be able to read. According to the provided context, exploitation is local, requires no additional execution privileges, and does not require user interaction. The issue is documented as enabling local escalation of privilege, and some reporting notes it may be useful in exploit chains that culminate in broader code-execution outcomes.
Are you exposed to this one?
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
Impact, mitigation & remediation
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
Impact
What an attacker gets, and what they’ve been doing with it.
Mitigation
If you can’t patch tonight, do this now.
Remediation
Patch, then assume compromise.
Exploits
1 valid exploit after Mallory filtered fakes, detection scripts, and README-only repos.
Repository is a standalone Android PoC for CVE-2026-0047, a missing permission check in ActivityManagerService.dumpBitmapsProto() on vulnerable Android 16 QPR2 Beta builds. It contains two Android application modules plus an automation script. The app/ module is an audit/demo PoC with a UI that can enumerate system services, test Binder dump exposure, simulate the vulnerable/patched behavior via a local FakeAmsService, and trigger the real Binder-based exploit path against the Android 'activity' service. The attacker/ module is a more realistic disguised app ('Flashlight Pro') that silently performs data harvesting and demonstrates exfiltration behavior, including scanning readable /proc files, installed packages, settings/content-provider accessible data, and external storage paths, then attempting the same bitmap-dump abuse. Both modules include local simulated vulnerable services to illustrate the bug class and patch. The main exploit capability is local privilege bypass/information disclosure via raw Binder IPC, not remote network exploitation. The shell script exploit.sh automates emulator setup, vulnerability probing with 'service call activity 117', APK build/install, UI interaction to trigger exploitation, and extraction of resulting bitmap artifacts from app-private storage. The exploit uses a crafted Parcel/ParcelFileDescriptor pipe to invoke dumpBitmapsProto() without android.permission.DUMP, then parses returned protobuf-like output for embedded PNG signatures and extracts stolen UI images. This is a real exploit PoC rather than just a detector, though it is operational/demo-grade rather than framework-weaponized. No hardcoded C2 or external exfiltration endpoints are present; exfiltration is local to device/app storage and host-side ADB retrieval.
Affected products & vendors
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.
Recent activity
14 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A critical Android Framework elevation-of-privilege vulnerability enabling local privilege escalation without additional privileges or user interaction.
Android Framework privilege escalation vulnerability (critical-rated per the content).
Android Framework privilege escalation vulnerability.
A critical elevation of privilege vulnerability in the Android Framework component, potentially useful for chaining with other exploits to gain higher privileges.
The version that knows your environment.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.