Local file access via incorrect Crane permissions

Incorrect default permissions in Crane on Samsung Mobile Devices running Android 14 allow local attackers to access files with phone privilege. Crane applies overly broad default file permissions instead of enforcing the access controls needed to confine those files to their intended privilege boundary. Exploitation requires a local position on an affected device but no prior privileges or user interaction, and the documented consequence is file disclosure only.