Security feature bypass

2023-10-2721:15:00

PRIOn knowledge base

www.prio-n.com

pipmenuview java local information disclosure multi user security boundary user interaction

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

In updateActionViews of PipMenuView.java, there is a possible bypass of a multi user security boundary due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
androideq11.0
androideq12.0
androideq12.1
androideq13.0

Name	Operator	Version
android	eq	11.0
android	eq	12.0
android	eq	12.1
android	eq	13.0

References

android.googlesource.com/platform/frameworks/base/+/7212a4bec2d2f1a74fa54a12a04255d6a183baa9

source.android.com/security/bulletin/2023-10-01