Android Settings Intent Redirect Vulnerability Allowing Local Privilege Escalation

A vulnerability has been identified in the Android Settings application, specifically in versions 13, 14, and 15. This issue arises from a confused deputy problem due to Intent Redirect, which could lead to local privilege escalation without requiring additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the April 2025 security patch level to address this vulnerability.