Local Information Disclosure Vulnerability in Android's Account Manager Service

CVE-2025-0086

What is CVE-2025-0086?

A vulnerability in the AccountManagerService of Android allows for the potential overwriting of authentication tokens due to a lack of proper permission checks. This missing validation could enable unauthorized access to sensitive information at the local level, without requiring user interaction for exploitation. Such vulnerabilities can increase the risk of data breaches, as malicious entities may leverage this flaw to gain insights into user accounts without needing elevated privileges.

References