Lucene search

K
osvGoogleOSV:ASB-A-242704576
HistoryJun 01, 2023 - 12:00 a.m.

Android 12 Pixel 6 Lock Screen Bypass that gives access to driving mode, and from the lock screen you can view recents and favorites locations, restricted notifications, contacts, podcasts history, ..

2023-06-0100:00:00
Google
osv.dev
7
android 12
pixel 6
lock screen bypass
driving mode
sensitive data
local privilege escalation
race condition

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

0.0004 Low

EPSS

Percentile

5.1%

In canStartSystemGesture of RecentsAnimationDeviceState.java, there is a possible partial lockscreen bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

0.0004 Low

EPSS

Percentile

5.1%

Related for OSV:ASB-A-242704576