🎯 Intent Redirection

The items that name it 8

• Content Providers and the potential weak spots they can have | Oversecured Blog
  articleas classification.key entities
• 20 Security Issues Found in Xiaomi Devices | Oversecured Blog
  writeupas techniques

  Exported components in Security, GetApps (MainUserAgreementActivity, AppChooserActivity) and Security Core pass attacker intents to startActivity or broadcasts, reaching non-exported activities, services and receivers, with system privileges in system apps

• Inside mobile taint analysis: how source-to-sink tracking finds real data-leak paths | Oversecured Blog
  articleas techniques

  Vulnerability class: an attacker-controlled Intent flows to startActivity() or startService(), granting access to protected components.

• Android deep link vulnerabilities: how intent filters lead to account takeover | Oversecured Blog
  articleas classification.key entities
• Vulnerabilities that lead to account takeover in banking and fintech mobile apps | Oversecured Blog
  articleas techniques

  An exported component relays an unvalidated nested Intent to reach protected components such as OAuth callback handlers

• SDK security in mobile apps: the attack surface your team didn
  articleas techniques

  A malicious app on the same device forges intents to exported SDK components, such as EngageSDK's MTCommonActivity, that the SDK trusts as internal, exfiltrating private app data, tokens and wallet credentials; Microsoft published the advisory on April 9, 2026

• PCI DSS and Mobile Apps: A Simple Guide | Oversecured Blog
  articleas classification.key entities
• 176 Vulnerabilities in Samsung Preinstalled Apps
  writeupas techniques

  Using a privileged app as a proxy to launch protected internal components; primary impact: access control bypass (IDs 151, 160, 163, 158, 165)