In getPendingIntentLaunchFlags of ActivityOptions.java, there is a possible elevation of privilege due to a confused deputy with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Configurations
Configuration 1 (hide)
|
History
06 Nov 2024, 17:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-611 |
25 Jul 2023, 18:02
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Google
Google android |
|
| CPE | cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:* cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* |
|
| CWE | NVD-CWE-Other | |
| References | (MISC) https://android.googlesource.com/platform/frameworks/base/+/51051de4eb40bb502db448084a83fd6cbfb7d3cf - Patch | |
| References | (MISC) https://source.android.com/security/bulletin/2023-07-01 - Patch, Vendor Advisory | |
| References | (MISC) https://android.googlesource.com/platform/frameworks/base/+/16c604aa7c253ce5cf075368a258c0b21386160d - Patch | |
| References | (MISC) https://android.googlesource.com/platform/frameworks/base/+/8418e3a017428683d173c0c82b0eb02d5b923a4e - Patch | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
13 Jul 2023, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-13 00:15
Updated : 2024-11-06 17:35
NVD link : CVE-2023-20918
Mitre link : CVE-2023-20918
CVE.ORG link : CVE-2023-20918
JSON object : View
Products Affected
- android
CWE