CVE-2023-40097

CVE-2023-40097 affects Android’s PackageManagerHelper.hasPermissionForActivity inside the framework. The flaw is an input-validation issue that can allow a URI grant, causing local elevation of privilege with no extra execution privileges required; exploitation requires user interaction. The publ...