Design/Logic Flaw

In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due to a missing check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40095

CVE-2023-40095 describes a likely local elevation of privilege in Android Framework due to a missing check in PendingIntentUtils.createDontSendToRestrictedAppsBundle. Exploitation does not require user interaction and could enable background activity launches on affected devices. Connected source...