Lucene search

K
osvGoogleOSV:ASB-A-298094386
HistoryFeb 01, 2024 - 12:00 a.m.

Wallpaper Service BAL Abuse

2024-02-0100:00:00
Google
osv.dev
11
backgroundlaunchprocesscontroller
arbitrary activity
local privilege escalation
wallpaper service

AI Score

7.4

Confidence

High

EPSS

0

Percentile

9.0%

In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Score

7.4

Confidence

High

EPSS

0

Percentile

9.0%

Related for OSV:ASB-A-298094386