Local privilege escalation via exposed preference provider

Privilege escalation in Urban Android Twilight 13.3 for Android allows local users to alter protected settings through a malicious app. An exported content provider accepts arbitrary key-value inserts and writes them into the app's SharedPreferences, which Twilight loads at startup. Installing an unauthorized local app and launching Twilight are required; successful writes can change critical behavior such as brightness and theme settings.