CVE-2023-21089

CVE-2023-21089 affects Android 11–13 and arises from a flaw in ActivityManagerService.startInstrumentation that could keep a foreground service alive when the app is in the background. This enables local escalation of privilege without additional execution privileges, with no user interaction req...

CVE-2023-21089

In startInstrumentation of ActivityManagerService.java, there is a possible way to keep the foreground service alive while the app is in the background. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...