Lucene search

K
osvGoogleOSV:ASB-A-305664128
HistoryFeb 01, 2024 - 12:00 a.m.

Screen capture policy overriden when there is secondary user on the device

2024-02-0100:00:00
Google
osv.dev
16
screen capture
device policy
logic error
privilege escalation
user interaction
software

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

In multiple files, there is a possible way to capture the device screen when disallowed by device policy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
platform/frameworks/baseeq13

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

Related for OSV:ASB-A-305664128