Privilege escalation

2023-08-1422:15:00

PRIOn knowledge base

www.prio-n.com

visituris

missing permission check

local escalation

user interaction

nvd

0.0004 Low

EPSS

Percentile

5.1%

JSON

In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
androideq11.0
androideq12.0
androideq13.0
androideq12.1

Name	Operator	Version
android	eq	11.0
android	eq	12.0
android	eq	13.0
android	eq	12.1

References

android.googlesource.com/platform/frameworks/base/+/a65429742caf05205ea7f1c2fdd1119ca652b810

source.android.com/security/bulletin/2023-08-01

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for PRION:CVE-2023-21286