Lucene search

K
osvGoogleOSV:ASB-A-317357401
HistoryJun 01, 2024 - 12:00 a.m.

Reveal audios across users via com.android.server.notification.NotificationManagerService.mService.updateNotificationChannelFromPrivilegedListener

2024-06-0100:00:00
Google
osv.dev
1
notificationmanagerservice
confused deputy
privilege escalation
user interaction
data leak
exploitation
android

6.9 Medium

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

In updateNotificationChannelFromPrivilegedListener of NotificationManagerService.java, there is a possible cross-user data leak due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

6.9 Medium

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%