Lucene search

K
osvGoogleOSV:ASB-A-193445603
HistoryFeb 01, 2022 - 12:00 a.m.

Starting Arbitrary Intent in the Name of SystemUI by Publishing Malicious Controls from ControlsProviderService

2022-02-0100:00:00
Google
osv.dev
16
arbitrary intent
system ui
local escalation
intent redirect
privilege escalation
user interaction
controlsproviderservice
detaildialog.kt

EPSS

0

Percentile

16.6%

In onActivityViewReady of DetailDialog.kt, there is a possible Intent Redirect due to a confused deputy. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. User interaction is needed for exploitation.

EPSS

0

Percentile

16.6%

Related for OSV:ASB-A-193445603