Lucene search

GoogleOSV:ASB-A-272024837

HistoryNov 01, 2023 - 12:00 a.m.

Start foreground activity from background via MediaSession#setMediaButtonReceiver

2023-11-0100:00:00

Google

osv.dev

foreground activity

mediasession

system_server

pending intent

local escalation

user interaction

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of system_server due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CPENameOperatorVersion
platform/frameworks/baseeq14

CPE	Name	Operator	Version
	platform/frameworks/base	eq	14

References

android.googlesource.com/platform/frameworks/base/+/55d3d57cbffc838c52d610af14a056dea87b422e

source.android.com/security/bulletin/2023-11-01