EUVD-2025-201777CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
4Description
In multiple locations, there is a possible bypass of user profile boundary with a forwarded intent due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Analysis
In multiple locations, there is a possible bypass of user profile boundary with a forwarded intent due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Technical Context
This vulnerability is classified as Improper Input Validation (CWE-20).
Affected Products
Affected products: Google Android 13.0
Remediation
A vendor patch is available. Apply it as soon as possible and verify the fix.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today