Launch Anywhere via Screen Saver on Pixel 6 Pro with Android 12L

2024-01-0100:00:00

Google

osv.dev

pixel 6 pro

android 12l

vulnerability

dreamservice

local escalation

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
platform/frameworks/baseeq12
platform/frameworks/baseeq11
platform/frameworks/baseeq12L
platform/frameworks/baseeq13

Name	Operator	Version
platform/frameworks/base	eq	12
platform/frameworks/base	eq	11
platform/frameworks/base	eq	12L
platform/frameworks/base	eq	13

References

android.googlesource.com/platform/frameworks/base/+/2ce1b7fd37273ea19fbbb6daeeaa6212357b9a70

source.android.com/security/bulletin/2024-01-01