Android Account Type Preference Loader Intent Type Check Bypass Vulnerability Allowing Privilege Escalation

A vulnerability has been identified in the AccountTypePreferenceLoader component of the Android Settings app. This issue arises from a confused deputy problem, which creates a potential bypass of intent type checks. As a result, it could lead to unauthorized privilege escalation without requiring additional execution rights or user interaction.

Impact

Exploitation of this vulnerability allows for local privilege escalation, enabling a user to gain elevated rights or access within the system.

Remediation

Users can update their devices to the September 2025 security patch level to address this vulnerability.