Local privilege escalation via unchecked protected-file reads

Privilege escalation in Google's Android Taimen bootloader allows local users to read protected files without user interaction. The affected code performs protected-file reads without the required permission check, but Google has not disclosed the specific locations because the issue record is private. A local application with low privileges is sufficient; the bounded disclosed consequence is unauthorized file access, with no additional execution privileges required.