The vulnerability of the isSafeIntent() function in the AccountTypePreferenceLoader.java module of Android operating systems allows a hacker to increase their privileges.

The vulnerability of the isSafeIntent function in the AccountTypePreferenceLoader.java module of Android operating systems relates to the possibility of bypassing access control mechanisms. Exploiting this vulnerability could allow attackers to enhance their privileges...

CVE-2025-32321

In isSafeIntent of AccountTypePreferenceLoader.java, there is a possible way to bypass an intent type check due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-40657

In addPreferencesForType of AccountTypePreferenceLoader.java, there is a possible way to disable apps for other users due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android that stems from the addPreferencesForType method in the AccountTypePreferenceLoader.java file contains a proxy confusion with a possible way to...

CVE-2022-20515

In onPreferenceClick of AccountTypePreferenceLoader.java, there is a possible way to retrieve protected files from the Settings app due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2020-0238

In updatePreferenceIntents of AccountTypePreferenceLoader, there is a possible confused deputy attack due to a race condition. This could lead to local escalation of privilege and launching privileged activities with no additional execution privileges needed. User interaction is not needed for...

PT-2020-11593 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions 8.0 through 10 Description: A logic flaw in the Settings app could lead to a confused deputy attack due to a race condition in the updatePreferenceIntents of AccountTypePreferenceLoader. This could result in local escalation ...