{"id":"ASB-A-378902342","details":"In isSafeIntent of AccountTypePreferenceLoader.java, there is a possible way to bypass an intent type check due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-378902342","CVE-2025-32321"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2025-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-09-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/e985e294f15db1267bd56a91952976b54f9970ae"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-next:0"},{"fixed":"16-next:2025-09-01"}]}],"versions":["16-next"],"ecosystem_specific":{"severity":"High","spl":"2025-09-01","types":["EoP"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/6a896b6b26d445800773e1b4649895bea17eac1f","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["211871508685666920013085314345219234856","45216488485728145961640678296778843562","6214376950557842633877643392020812109","298449138174325273555020650581627032858"]},"id":"ASB-A-378902342-c07803b6"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/6a896b6b26d445800773e1b4649895bea17eac1f","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java","function":"isSafeIntent"},"deprecated":false,"digest":{"function_hash":"97190110315982117633926947661384121427","length":715},"id":"ASB-A-378902342-e3743b15"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/6a896b6b26d445800773e1b4649895bea17eac1f"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-378902342.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-09-01"}]}],"versions":["15"],"ecosystem_specific":{"severity":"High","spl":"2025-09-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-378902342-1d7e3510","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/799ef4476b7df12187449a1d2f835b0f3fd1121a","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java"},"deprecated":false,"digest":{"line_hashes":["211871508685666920013085314345219234856","45216488485728145961640678296778843562","6214376950557842633877643392020812109","298449138174325273555020650581627032858"],"threshold":0.9}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/799ef4476b7df12187449a1d2f835b0f3fd1121a","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java","function":"isSafeIntent"},"deprecated":false,"digest":{"function_hash":"97190110315982117633926947661384121427","length":715},"id":"ASB-A-378902342-f959fd4e","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/799ef4476b7df12187449a1d2f835b0f3fd1121a"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-378902342.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2025-09-01"}]}],"versions":["16"],"ecosystem_specific":{"spl":"2025-09-01","types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ade7c77634363b787e8e73591247d9dff2b1b149","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java","function":"isSafeIntent"},"deprecated":false,"digest":{"function_hash":"97190110315982117633926947661384121427","length":715},"id":"ASB-A-378902342-045befe2","signature_type":"Function"},{"target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["211871508685666920013085314345219234856","45216488485728145961640678296778843562","6214376950557842633877643392020812109","298449138174325273555020650581627032858"]},"id":"ASB-A-378902342-d03f283f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ade7c77634363b787e8e73591247d9dff2b1b149"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/ade7c77634363b787e8e73591247d9dff2b1b149"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-378902342.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-09-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["211871508685666920013085314345219234856","45216488485728145961640678296778843562","6214376950557842633877643392020812109","298449138174325273555020650581627032858"],"threshold":0.9},"id":"ASB-A-378902342-e6aa923a","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/92c4a3cbe027de98e7449d9015bc87fca6f4f954","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/92c4a3cbe027de98e7449d9015bc87fca6f4f954","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java","function":"isSafeIntent"},"deprecated":false,"digest":{"length":715,"function_hash":"97190110315982117633926947661384121427"},"id":"ASB-A-378902342-e9abddf6","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/92c4a3cbe027de98e7449d9015bc87fca6f4f954"],"severity":"High","spl":"2025-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-378902342.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-09-01"}]}],"versions":["14"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/702e2d1a4948c9eda91616d9b4dc1b4d34834055"],"severity":"High","spl":"2025-09-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-378902342-39cbb1ba","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/702e2d1a4948c9eda91616d9b4dc1b4d34834055","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["211871508685666920013085314345219234856","45216488485728145961640678296778843562","6214376950557842633877643392020812109","298449138174325273555020650581627032858"]}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/702e2d1a4948c9eda91616d9b4dc1b4d34834055","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java","function":"isSafeIntent"},"deprecated":false,"digest":{"function_hash":"97190110315982117633926947661384121427","length":715},"id":"ASB-A-378902342-95b3cb9c"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-378902342.json"}}],"schema_version":"1.9.0"}