CVE-2023-21139

2023-06-1500:00:00

google_android

www.cve.org

android

mediacontrolpanel.java

unsafe intent

privilege escalation

local escalation

sysui

cve-2023-21139

android-13

a-271845008

EPSS

Percentile

5.1%

JSON

In bindPlayer of MediaControlPanel.java, there is a possible launch arbitrary activity in SysUI due to Unsafe Intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-271845008

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Android",
    "versions": [
      {
        "version": "Android-13",
        "status": "affected"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2023-06-01

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2023-21139