Unchecked public access permissions on a core Broadcast Receiver allow unauthorized local software components to invoke administrative operations.