Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-21145
HistoryJul 13, 2023 - 12:15 a.m.

Design/Logic Flaw

2023-07-1300:15:00
PRIOn knowledge base
www.prio-n.com
4
activityrecord
logic flaw
background launch
privilege escalation
user interaction

0.0004 Low

EPSS

Percentile

5.1%

In updatePictureInPictureMode of ActivityRecord.java, there is a possible bypass of background launch restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
androideq11.0
androideq12.0
androideq12.1
androideq13.0

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2023-21145