LeakValue

Android 13 вносит множество улучшений, направленных на усиление защиты механизма сериализации Parcel Вот презентация команды Android Security and Privacy о внесённых улучшениях Это отлично, определённо устраняет или делает неэксплуатируемыми многие уязвимости. Также они описывают, как сломали мой...

CVE-2022-20452

In initializeFromParcelLocked of BaseBundle.java, there is a possible method arbitrary code execution due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...

CVE-2022-20452

In initializeFromParcelLocked of BaseBundle.java, there is a possible method arbitrary code execution due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...

CVE-2022-20452

In initializeFromParcelLocked of BaseBundle.java, there is a possible method arbitrary code execution due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...

CVE-2022-20452

CVE-2022-20452 affects Android 13 in the BaseBundle.java method initializeFromParcelLocked, where a flaw (confused deputy) can allow arbitrary code execution, enabling local escalation of privilege without extra privileges or user interaction. Related evidence: CVE described in NVD/NV D represent...

CVE-2022-20452

In initializeFromParcelLocked of BaseBundle.java, there is a possible method arbitrary code execution due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...