Local privilege escalation via Zygote command injection

Local privilege escalation in Google Android 12 through 14 allows local users to execute code as any app through a crafted global setting. ZygoteProcess writes newline-containing hidden_api_blacklist_exemptions values into Zygote's line-delimited socket protocol without rejecting or escaping them, so injected lines become a second process-spawn command. Exploitation requires WRITE_SECURE_SETTINGS, held by the ADB shell and certain privileged apps, and grants access to another app's data and privileges without user interaction.