Android App Restrictions Fragment Intent Security Bypass Vulnerability Allowing Privilege Escalation

A vulnerability has been identified in the AppRestrictionsFragment component of the Android Settings application. This issue arises from a confused deputy problem, which creates a potential to bypass intent security checks. Exploitation of this vulnerability could lead to local escalation of privileges, with no additional execution rights required. However, it does necessitate user interaction.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation within the affected application.

Remediation

Users can update their devices to the September 2025 security patch level to address this vulnerability.