Android Accessibility Services Logic Error Vulnerability Allowing Privilege Escalation

Vulnerability

A vulnerability has been identified in the AccessibilityFragment.java file, specifically in the setupAccessibilityServices function. This issue arises from a logic error that creates a potential to hide an enabled accessibility service. Exploiting this vulnerability could lead to local privilege escalation, without the need for additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Added: Sep 4, 2025, 8:16 PM
Updated: Sep 4, 2025, 8:16 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
7.5
exploitability
4.7
remediation
0.0
relevance
0.4
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.