Design/Logic Flaw

2023-09-1121:15:00

PRIOn knowledge base

www.prio-n.com

logic flaw

background activity launch

local privilege escalation

no user interaction

unsafe pendingintent

0.0004 Low

EPSS

Percentile

5.1%

JSON

In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
androideq12.0
androideq12.1
androideq13.0

Name	Operator	Version
android	eq	12.0
android	eq	12.1
android	eq	13.0

References

android.googlesource.com/platform/frameworks/base/+/109e58b62dc9fedcee93983678ef9d4931e72afa

source.android.com/security/bulletin/2023-09-01

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for PRION:CVE-2023-35676