Design/Logic Flaw

2023-12-0423:15:00

PRIOn knowledge base

www.prio-n.com

logic flaw

createdontsendtorestrictedappsbundle

pendingintentutils.java

local privilege escalation

user interaction

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due to a missing check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
androideq11.0
androideq12.0
androideq12.1
androideq13.0
androideq14.0

Name	Operator	Version
android	eq	11.0
android	eq	12.0
android	eq	12.1
android	eq	13.0
android	eq	14.0

References

android.googlesource.com/platform/frameworks/base/+/d98abeef8f870b60510feafbadcea0c2f9cbae65

source.android.com/security/bulletin/2023-12-01