CVE-2023-40079: Undefined Security Weakness

In injectSendIntentSender of ShortcutService.java, there is a possible background activity launch due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2023-27253

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is related to a permissions bypass in the injectSendIntentSender function of ShortcutService.java. This could lead to a background activity launch, resulting in local escalation...