Lucene search

PRIOn knowledge basePRION:CVE-2023-40094

HistoryDec 04, 2023 - 11:15 p.m.

Design/Logic Flaw

2023-12-0423:15:00

PRIOn knowledge base

www.prio-n.com

security flaw

logic flaw

activitytaskmanagerservice

local privilege escalation

missing permission check

lock screen bypass

no user interaction

nvd

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
androideq11.0
androideq12.0
androideq12.1
androideq13.0
androideq14.0

Name	Operator	Version
android	eq	11.0
android	eq	12.0
android	eq	12.1
android	eq	13.0
android	eq	14.0

References

android.googlesource.com/platform/frameworks/base/+/1120bc7e511710b1b774adf29ba47106292365e7

source.android.com/security/bulletin/2023-12-01