Android Accessibility Services Local Privilege Escalation Vulnerability
Vulnerability
A vulnerability has been identified in the AccessibilitySettingsUtils.java file, where a malicious Talkback service could be improperly enabled instead of the intended system component. This issue arises from a logic error in the code, potentially allowing local privilege escalation without requiring additional execution privileges or user interaction.
Impact
Exploitation of this vulnerability could lead to unauthorized privileges being granted, allowing a user or application to perform actions or access resources that are normally restricted.
Added: Sep 4, 2025, 8:35 PM
Updated: Sep 4, 2025, 8:35 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
4.7remediation
0.0relevance
0.5threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
