Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-20916
HistoryJan 26, 2023 - 9:18 p.m.

Design/Logic Flaw

2023-01-2621:18:00
PRIOn knowledge base
www.prio-n.com
2
design flaw
logic flaw
android-12
android-12l
local privilege escalation
missing permission check

0.0004 Low

EPSS

Percentile

5.1%

In getMainActivityLaunchIntent of LauncherAppsService.java, there is a possible way to bypass the restrictions on starting activities from the background due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-229256049

CPENameOperatorVersion
androideq12.0
androideq12.1

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2023-20916