{"id":"ASB-A-378902342","details":"In isSafeIntent of AccountTypePreferenceLoader.java, there is a possible way to bypass an intent type check due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-378902342","CVE-2025-32321"],"modified":"2026-04-13T15:04:09.269232Z","published":"2025-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-09-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/e985e294f15db1267bd56a91952976b54f9970ae"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-next:0"},{"fixed":"16-next:2025-09-01"}]}],"versions":["16-next"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","signature_type":"Line","id":"ASB-A-378902342-c07803b6","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/6a896b6b26d445800773e1b4649895bea17eac1f","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java"},"digest":{"threshold":0.9,"line_hashes":["211871508685666920013085314345219234856","45216488485728145961640678296778843562","6214376950557842633877643392020812109","298449138174325273555020650581627032858"]},"deprecated":false},{"signature_version":"v1","signature_type":"Function","id":"ASB-A-378902342-e3743b15","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/6a896b6b26d445800773e1b4649895bea17eac1f","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java","function":"isSafeIntent"},"digest":{"length":715,"function_hash":"97190110315982117633926947661384121427"},"deprecated":false}],"spl":"2025-09-01","types":["EoP"],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/6a896b6b26d445800773e1b4649895bea17eac1f"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-378902342.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-09-01"}]}],"versions":["15"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","signature_type":"Line","id":"ASB-A-378902342-1d7e3510","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/799ef4476b7df12187449a1d2f835b0f3fd1121a","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java"},"digest":{"threshold":0.9,"line_hashes":["211871508685666920013085314345219234856","45216488485728145961640678296778843562","6214376950557842633877643392020812109","298449138174325273555020650581627032858"]},"deprecated":false},{"signature_version":"v1","signature_type":"Function","id":"ASB-A-378902342-f959fd4e","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/799ef4476b7df12187449a1d2f835b0f3fd1121a","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java","function":"isSafeIntent"},"digest":{"length":715,"function_hash":"97190110315982117633926947661384121427"},"deprecated":false}],"spl":"2025-09-01","types":["EoP"],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/799ef4476b7df12187449a1d2f835b0f3fd1121a"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-378902342.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2025-09-01"}]}],"versions":["16"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","signature_type":"Function","id":"ASB-A-378902342-045befe2","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ade7c77634363b787e8e73591247d9dff2b1b149","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java","function":"isSafeIntent"},"digest":{"length":715,"function_hash":"97190110315982117633926947661384121427"},"deprecated":false},{"signature_version":"v1","signature_type":"Line","id":"ASB-A-378902342-d03f283f","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ade7c77634363b787e8e73591247d9dff2b1b149","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java"},"digest":{"threshold":0.9,"line_hashes":["211871508685666920013085314345219234856","45216488485728145961640678296778843562","6214376950557842633877643392020812109","298449138174325273555020650581627032858"]},"deprecated":false}],"spl":"2025-09-01","types":["EoP"],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/ade7c77634363b787e8e73591247d9dff2b1b149"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-378902342.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-09-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","signature_type":"Line","id":"ASB-A-378902342-e6aa923a","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/92c4a3cbe027de98e7449d9015bc87fca6f4f954","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java"},"digest":{"threshold":0.9,"line_hashes":["211871508685666920013085314345219234856","45216488485728145961640678296778843562","6214376950557842633877643392020812109","298449138174325273555020650581627032858"]},"deprecated":false},{"signature_version":"v1","signature_type":"Function","id":"ASB-A-378902342-e9abddf6","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/92c4a3cbe027de98e7449d9015bc87fca6f4f954","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java","function":"isSafeIntent"},"digest":{"length":715,"function_hash":"97190110315982117633926947661384121427"},"deprecated":false}],"spl":"2025-09-01","types":["EoP"],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/92c4a3cbe027de98e7449d9015bc87fca6f4f954"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-378902342.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-09-01"}]}],"versions":["14"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","signature_type":"Line","id":"ASB-A-378902342-39cbb1ba","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/702e2d1a4948c9eda91616d9b4dc1b4d34834055","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java"},"digest":{"threshold":0.9,"line_hashes":["211871508685666920013085314345219234856","45216488485728145961640678296778843562","6214376950557842633877643392020812109","298449138174325273555020650581627032858"]},"deprecated":false},{"signature_version":"v1","signature_type":"Function","id":"ASB-A-378902342-95b3cb9c","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/702e2d1a4948c9eda91616d9b4dc1b4d34834055","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java","function":"isSafeIntent"},"digest":{"length":715,"function_hash":"97190110315982117633926947661384121427"},"deprecated":false}],"spl":"2025-09-01","types":["EoP"],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/702e2d1a4948c9eda91616d9b4dc1b4d34834055"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-378902342.json"}}],"schema_version":"1.7.5"}