● Android Bulletin · May 2026

Android Security Bulletin: May 2026 Intent Redirection Triage

Triage of Android's May 2026 security updates resolving framework intent redirection flaws and mutable PendingIntent hijacking vulnerabilities.

37
Security Issues
1
Framework Intent Hijack
7.8
CVSS Intent Flaw
High
App Developer Alert

सुरक्षा समीक्षा और जोखिम विश्लेषण

Google fixed CVE-2024-23712 in the Android Framework, where system services accepted unvalidated nested Intents, allowing malicious applications to launch internal non-exported activities with system privileges.

संवेदनशील कमियों की विस्तृत तालिका

CVE पहचानकर्ता सबसिस्टम / घटक प्रभाव CVSS सक्रिय हमला?
CVE-2024-23712Android Framework CoreIntent Redirection / EOP7.8 HighYES (PoC Available)
CVE-2024-23713Telecom SubsystemCall Interception Bypass6.8 MediumNo
CVE-2024-23714Package Manager ServiceArbitrary App Overwrite7.2 HighNo
सोर्स कोड का गहन विश्लेषण

Deep Dive: Android Framework Intent Redirection Teardown →

Review the Java diff in ActivityManagerService.java sanitizing target component identifiers before dispatching pending intents.

← सम्पूर्ण सुरक्षा निर्देशिका सभी सुरक्षा पैच अपडेट्स →