Information disclosure

In getFullScreenIntentDecision of NotificationInterruptStateProviderImpl.java, there is a possible activity launch while the app is in the background due to a BAL bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed fo...

CVE-2023-21129

CVE-2023-21129 affects Android 11–13 and is described as a BAL bypass in getFullScreenIntentDecision within NotificationInterruptStateProviderImpl.java, enabling a possible activity launch when the app is in the background and potentially allowing local elevation of privilege with no extra execut...