Design/Logic Flaw

2022-11-0822:15:00

PRIOn knowledge base

www.prio-n.com

android

basebundle

code execution

privilege escalation

security flaw

0.0004 Low

EPSS

Percentile

5.1%

JSON

In initializeFromParcelLocked of BaseBundle.java, there is a possible method arbitrary code execution due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-240138318