CVE-2023-40109

2024-02-1523:15:08

[email protected]

web.nvd.nist.gov

cve-2023-40109

usbconfiguration

permissions bypass

local escalation of privilege

user interaction

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

In createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL) due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.