Android Framework Account Manager Service Elevation of Privilege Vulnerability

Vulnerability

A vulnerability in the AccountManagerService component of the Android Framework allows for a local elevation of privilege. This issue arises from unsafe deserialization, which creates a potential bypass of parcel mismatch mitigations. Exploitation of this vulnerability requires user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the January 2025 security patch level to address this vulnerability. Instructions for checking and updating the Android version are available on the Google Support website.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
5.0
exploitability
4.4
remediation
0.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.