CVE-2023-21139

In bindPlayer of MediaControlPanel.java, there is a possible launch arbitrary activity in SysUI due to Unsafe Intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2023-21126: Incorrect Default Permissions

In bindOutputSwitcherAndBroadcastButton of MediaControlPanel.java, there is a possible launch arbitrary activity under SysUI due to Unsafe Intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2023-21126

CVE-2023-21126 affects Android 13. The issue arises in MediaControlPanel.java’s bindOutputSwitcherAndBroadcastButton, where an Unsafe Intent can launch an arbitrary activity under SysUI. This enables local elevation of privilege with no required user interaction. The vulnerability is supported by...

CVE-2023-21139

In bindPlayer of MediaControlPanel.java, there is a possible launch arbitrary activity in SysUI due to Unsafe Intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-20545: Improper Input Validation

In bindArtworkAndColors of MediaControlPanel.java, there is a possible way to crash the phone due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Input validation

In bind of MediaControlPanel.java, there is a possible way to lock up the system UI using a malicious media file due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2021-0551

CVE-2021-0551 affects Android 11 with a DoS via a vulnerability in the MediaControlPanel.java bind. The root cause is improper input validation in the bind path, allowing a malicious media file to lock up the system UI and cause remote denial of service. Exploitation requires user interaction. Pu...