Local Privilege Escalation in Android's App Restrictions Feature

CVE-2025-32326

What is CVE-2025-32326?

A vulnerability exists within the App Restrictions feature of Android, specifically in multiple functions of AppRestrictionsFragment.java. This flaw creates an opportunity for a local privilege escalation attack, where an attacker can bypass intent security checks by exploiting a confused deputy pattern. While requiring user interaction for exploitation, this vulnerability could potentially allow unauthorized actions without needing additional execution privileges, thus compromising the integrity of the affected systems.

References