System-permission escalation via dynamic group auto-grant

Privilege escalation in Android 12 through 15 allows local users to obtain system permissions through Permission Controller. Dynamic permission groups were treated as granted without requiring either every permission to be auto-granted or a platform permission in the group to be granted. Exploitation requires user interaction and can grant the attacking app system permissions beyond its existing privileges.