Code injection

2023-07-1300:15:00

PRIOn knowledge base

www.prio-n.com

code injection

keyguardsecuritycontainercontroller

device setup

local privilege escalation

logic error

0.0004 Low

EPSS

Percentile

5.1%

JSON

In showNextSecurityScreenOrFinish of KeyguardSecurityContainerController.java, there is a possible way to access the lock screen during device setup due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
androideq11.0
androideq12.0
androideq13.0
androideq13.1

Name	Operator	Version
android	eq	11.0
android	eq	12.0
android	eq	13.0
android	eq	13.1

References

android.googlesource.com/platform/frameworks/base/+/a33159e8cb297b9eee6fa5c63c0e343d05fad622

source.android.com/security/bulletin/2023-07-01

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for PRION:CVE-2023-21245