Privilege escalation via unauthorized favorites intent update

Privilege escalation in Action Launcher 50.5 allows local users to redirect trusted launcher icons to a malicious Android activity. The exposed favorites content provider accepts an unauthorized app's update to the intent field, replacing a trusted icon's launch target. A malicious app must already run on the device and a user must select the altered icon, enabling a fake interface to capture sensitive information.