The vulnerability of the isSystemUid() function in the AccountManagerService.java module of Android operating systems allows a hacker to disclose protected information.

The vulnerability of the isSystemUid function in the AccountManagerService.java module of Android operating systems is related to the possibility of bypassing access control mechanisms. Exploiting this vulnerability could allow attackers to disclose protected information...

CVE-2025-48545

In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a confused deputy. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation...