Lucene search
PRIOn knowledge basePRION:CVE-2023-20904HistoryJan 26, 2023 - 9:18 p.m.
Code injection
2023-01-2621:18:00
PRIOn knowledge base
www.prio-n.com
code injection
settingsactivity
android-12l
android-13
intent mismatch
local privilege escalation
no user interaction
nvd
0.0004 Low
EPSS
Percentile
5.1%
In getTrampolineIntent of SettingsActivity.java, there is a possible launch of arbitrary activity due to an Intent mismatch in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12L Android-13Android ID: A-246300272
Related
osv
osv
Intent injection through Intent.toUri/Intent.parseUri mismatch
2023-01-01 00:00:00
cve
cve
CVE-2023-20904
2023-01-26 21:18:10
cvelist
cvelist
CVE-2023-20904
2023-01-24 00:00:00
nvd
nvd
CVE-2023-20904
2023-01-26 21:18:10