Android Framework Intent Filter Bypass Vulnerability Allowing Local Privilege Escalation

A race condition has been identified in the Android Framework that allows for an intent filter bypass. This vulnerability could lead to a local escalation of privilege, with no additional execution privileges required. Exploitation of this issue does not involve user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized access to elevated privileges, potentially allowing a user to perform actions or access resources that are normally restricted.

Reproduction

The vulnerability can be reproduced by creating an intent that declares its own type. If the intent type is changed after the initial declaration, it can bypass the intended filters, leading to unauthorized access or actions.

Remediation

Users can update to the December 2025 security patch level to address this vulnerability.