Android XR EUVD-2026-33728

Exploitation requires the attacker to be able to execute code locally on an Android XR device running a pre-2026-06-01 patch level - typically a malicious or compromised app installed on the device - and to invoke InputMethodManagerService.addInputMethodListener; no user interaction, no additional permissions, and no special device configuration are needed because the IMMS path is reachable from any app context. The limiting factor is local code execution on Android XR specifically: the issue does not apply to mainline Android handset builds per the supplied CPE, and despite the CVSS AV:N tag the description constrains this to local privilege escalation, so remote network exploitation is not supported by the available data.

The headline CVSS 4.0 score of 10.0 with AV:N/AC:L/PR:N/UI:N and confidentiality, integrity, availability, and subsequent-system impacts all High looks catastrophic, but the description explicitly says 'local escalation of privilege' - a direct conflict with AV:N that should be resolved before triaging this as a remote unauthenticated bug; the realistic attack vector is almost certainly AV:L (a malicious local app), consistent with how IMMS is reached on Android. There is no EPSS score, no CISA KEV listing, and no public PoC referenced, so this is currently 'no public exploit identified at time of analysis' despite the inflated score. Treat as a high-priority local EoP on Android XR devices that should ship the June 2026 patch, but do not prioritize it as an internet-exposed RCE based on the CVSS vector alone.

A user installs a seemingly benign Android XR application that, once running, calls InputMethodManagerService.addInputMethodListener without holding the IME-management permission that should be required. Because the check is missing, the app receives privileged IME state callbacks from system_server and can use that foothold to escalate privileges or influence input handling on the device; no user interaction beyond launching the malicious app is required, and no public PoC is currently referenced.