BAL bypass by utilizing UsbManager.requestPermission (android 14 beta4)

2023-11-0100:00:00

Google

osv.dev

bal

usbmanager

requestpermission

bypass

usbconfiguration

permissions

local escalation

privilege

user interaction

software

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

In createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL) due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CPENameOperatorVersion
platform/frameworks/baseeq11
platform/frameworks/baseeq12L
platform/frameworks/baseeq13
platform/frameworks/baseeq12
platform/frameworks/baseeq14