In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Settings/+/d3534b7d0f7fc61bcaeb0f47f0001d201a81707e"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "194365308924960940794496665503731965163",
"length": 1289
},
"id": "ASB-A-313418699-2907e34b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/d3534b7d0f7fc61bcaeb0f47f0001d201a81707e",
"target": {
"file": "src/com/android/settings/accounts/AddAccountSettings.java",
"function": "run"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"231040450946816645150177675870623488963",
"133981481359775543714746967838171563200",
"51423928422532330003191418466314049116",
"176833134972182007356409370417212464392",
"105449182843398668722248605571737464017",
"171431870936241403939289297422323926192",
"18508963950461200741042946838025236871",
"326313859143273143133507057129275371392",
"50123458323918389635972703208695361651",
"219325016065893450305490402825637188830",
"319652244828281951889943310953128256312",
"32392067108528320633570600300771055991",
"181963379944312962558504600923436550736",
"152835222621716611578843931731114164929",
"187078125845248219950100068119928723184",
"316289188087037736258676582828955388861",
"214419799937458248601334964805801161044",
"185395813266936124766724370491844058931",
"295747577431459138783214723720080232905",
"326147484758573081732165241444333677847",
"31759940807133187746312226648005882376",
"180787186465057521516667641705173514318"
],
"threshold": 0.9
},
"id": "ASB-A-313418699-e39b1cf9",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/d3534b7d0f7fc61bcaeb0f47f0001d201a81707e",
"target": {
"file": "src/com/android/settings/accounts/AddAccountSettings.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Settings/+/8e8cdc27eb8faf6efefd9d9433738d738b38884e"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "194365308924960940794496665503731965163",
"length": 1289
},
"id": "ASB-A-313418699-1feaf06d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/8e8cdc27eb8faf6efefd9d9433738d738b38884e",
"target": {
"file": "src/com/android/settings/accounts/AddAccountSettings.java",
"function": "run"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"133981481359775543714746967838171563200",
"51423928422532330003191418466314049116",
"176833134972182007356409370417212464392",
"105449182843398668722248605571737464017",
"171431870936241403939289297422323926192",
"18508963950461200741042946838025236871",
"326313859143273143133507057129275371392",
"50123458323918389635972703208695361651",
"187078125845248219950100068119928723184",
"316289188087037736258676582828955388861",
"214419799937458248601334964805801161044",
"185395813266936124766724370491844058931",
"295747577431459138783214723720080232905",
"326147484758573081732165241444333677847",
"31759940807133187746312226648005882376",
"180787186465057521516667641705173514318"
],
"threshold": 0.9
},
"id": "ASB-A-313418699-2d54d1f2",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/8e8cdc27eb8faf6efefd9d9433738d738b38884e",
"target": {
"file": "src/com/android/settings/accounts/AddAccountSettings.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Settings/+/99b46cf4f495c5d9842a2016f960c7fb779e0e03"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "194365308924960940794496665503731965163",
"length": 1289
},
"id": "ASB-A-313418699-10fc8a0d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/99b46cf4f495c5d9842a2016f960c7fb779e0e03",
"target": {
"file": "src/com/android/settings/accounts/AddAccountSettings.java",
"function": "run"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"231040450946816645150177675870623488963",
"133981481359775543714746967838171563200",
"51423928422532330003191418466314049116",
"176833134972182007356409370417212464392",
"105449182843398668722248605571737464017",
"171431870936241403939289297422323926192",
"18508963950461200741042946838025236871",
"326313859143273143133507057129275371392",
"50123458323918389635972703208695361651",
"219325016065893450305490402825637188830",
"319652244828281951889943310953128256312",
"32392067108528320633570600300771055991",
"181963379944312962558504600923436550736",
"152835222621716611578843931731114164929",
"187078125845248219950100068119928723184",
"316289188087037736258676582828955388861",
"214419799937458248601334964805801161044",
"185395813266936124766724370491844058931",
"295747577431459138783214723720080232905",
"326147484758573081732165241444333677847",
"31759940807133187746312226648005882376",
"180787186465057521516667641705173514318"
],
"threshold": 0.9
},
"id": "ASB-A-313418699-356c95ba",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/99b46cf4f495c5d9842a2016f960c7fb779e0e03",
"target": {
"file": "src/com/android/settings/accounts/AddAccountSettings.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Settings/+/d560eaf713bb3333f3f309203bd1d322c45b6cd8"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "194365308924960940794496665503731965163",
"length": 1289
},
"id": "ASB-A-313418699-96b955dc",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/d560eaf713bb3333f3f309203bd1d322c45b6cd8",
"target": {
"file": "src/com/android/settings/accounts/AddAccountSettings.java",
"function": "run"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"231040450946816645150177675870623488963",
"133981481359775543714746967838171563200",
"51423928422532330003191418466314049116",
"176833134972182007356409370417212464392",
"105449182843398668722248605571737464017",
"171431870936241403939289297422323926192",
"18508963950461200741042946838025236871",
"326313859143273143133507057129275371392",
"50123458323918389635972703208695361651",
"219325016065893450305490402825637188830",
"319652244828281951889943310953128256312",
"32392067108528320633570600300771055991",
"181963379944312962558504600923436550736",
"152835222621716611578843931731114164929",
"187078125845248219950100068119928723184",
"316289188087037736258676582828955388861",
"214419799937458248601334964805801161044",
"185395813266936124766724370491844058931",
"295747577431459138783214723720080232905",
"326147484758573081732165241444333677847",
"31759940807133187746312226648005882376",
"180787186465057521516667641705173514318"
],
"threshold": 0.9
},
"id": "ASB-A-313418699-d42e8e26",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/d560eaf713bb3333f3f309203bd1d322c45b6cd8",
"target": {
"file": "src/com/android/settings/accounts/AddAccountSettings.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Settings/+/fa489f97abf9ef0448a63389763ab416ae1db2e2"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"231040450946816645150177675870623488963",
"133981481359775543714746967838171563200",
"51423928422532330003191418466314049116",
"176833134972182007356409370417212464392",
"105449182843398668722248605571737464017",
"171431870936241403939289297422323926192",
"18508963950461200741042946838025236871",
"326313859143273143133507057129275371392",
"50123458323918389635972703208695361651",
"219325016065893450305490402825637188830",
"319652244828281951889943310953128256312",
"32392067108528320633570600300771055991",
"181963379944312962558504600923436550736",
"152835222621716611578843931731114164929",
"187078125845248219950100068119928723184",
"316289188087037736258676582828955388861",
"214419799937458248601334964805801161044",
"185395813266936124766724370491844058931",
"295747577431459138783214723720080232905",
"326147484758573081732165241444333677847",
"31759940807133187746312226648005882376",
"180787186465057521516667641705173514318"
],
"threshold": 0.9
},
"id": "ASB-A-313418699-1151d827",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/fa489f97abf9ef0448a63389763ab416ae1db2e2",
"target": {
"file": "src/com/android/settings/accounts/AddAccountSettings.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "194365308924960940794496665503731965163",
"length": 1289
},
"id": "ASB-A-313418699-a0d352a7",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/fa489f97abf9ef0448a63389763ab416ae1db2e2",
"target": {
"file": "src/com/android/settings/accounts/AddAccountSettings.java",
"function": "run"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Settings/+/a5a3a263a13020826758f7bec708e54f0fcefe6c"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"133981481359775543714746967838171563200",
"51423928422532330003191418466314049116",
"176833134972182007356409370417212464392",
"105449182843398668722248605571737464017",
"171431870936241403939289297422323926192",
"18508963950461200741042946838025236871",
"326313859143273143133507057129275371392",
"50123458323918389635972703208695361651",
"187078125845248219950100068119928723184",
"316289188087037736258676582828955388861",
"214419799937458248601334964805801161044",
"185395813266936124766724370491844058931",
"295747577431459138783214723720080232905",
"326147484758573081732165241444333677847",
"31759940807133187746312226648005882376",
"180787186465057521516667641705173514318"
],
"threshold": 0.9
},
"id": "ASB-A-313418699-d3982172",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/a5a3a263a13020826758f7bec708e54f0fcefe6c",
"target": {
"file": "src/com/android/settings/accounts/AddAccountSettings.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "194365308924960940794496665503731965163",
"length": 1289
},
"id": "ASB-A-313418699-ed486d3d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/a5a3a263a13020826758f7bec708e54f0fcefe6c",
"target": {
"file": "src/com/android/settings/accounts/AddAccountSettings.java",
"function": "run"
}
}
]
}