CVE-2023-35676

In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2023-35676

CVE-2023-35676 describes an elevation-of-privilege issue in Android related to an unsafe PendingIntent in the CreateQuickShareAction flow inside SaveImageInBackgroundTask.java. The vulnerability can trigger a background activity launch, enabling local privilege elevation with no additional execut...