Local privilege escalation via automatic contact import

Incorrect authorization in Android 13 through 16 allows local users to add contacts without permission through the Contacts app. SelectAccountActivity.onCreate automatically imports contacts when only one account exists instead of presenting the account-selection dialog that blocks unauthorized import. Exploitation requires low-privileged local execution but no user interaction, and the resulting write adds contacts outside the caller's granted permissions.