Design/Logic Flaw

2023-10-2721:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

logic error

background activity launch restrictions

privilege escalation

local escalation

0.0005 Low

EPSS

Percentile

18.4%

JSON

In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
androideq11.0
androideq12.0
androideq12.1

Name	Operator	Version
android	eq	11.0
android	eq	12.0
android	eq	12.1

References

android.googlesource.com/platform/frameworks/base/+/18c3b194642f3949d09e48c21da5658fa04994c8

source.android.com/security/bulletin/2023-10-01

0.0005 Low

EPSS

Percentile

18.4%

JSON

Related for PRION:CVE-2023-40116