Lucene search

GoogleOSV:ASB-A-271845008

HistoryJun 01, 2023 - 12:00 a.m.

LaunchAnywhere in SysUI via media notification

2023-06-0100:00:00

Google

osv.dev

sysui

launchanywhere

mediacontrolpanel

unsafe intent

local escalation

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

5.1%

JSON

In bindPlayer of MediaControlPanel.java, there is a possible launch arbitrary activity in SysUI due to Unsafe Intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

android.googlesource.com/platform/frameworks/base/+/0f857518e3dd6490508a88ceac39309e77cb231b

android.googlesource.com/platform/frameworks/base/+/b8e6044520761f537473d0a04a651118236d2c52

android.googlesource.com/platform/frameworks/base/+/d9bdeafe811e24d2bee3b2025b77d02ac6b8cbd9

source.android.com/security/bulletin/2023-06-01

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for OSV:ASB-A-271845008