Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-20962
HistoryMar 24, 2023 - 8:15 p.m.

Information disclosure

2023-03-2420:15:00
PRIOn knowledge base
www.prio-n.com
5
getsliceenditem
foreground activity
unsafe pendingintent
local information disclosure
android-13
a-256590210
nvd

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

In getSliceEndItem of MediaVolumePreferenceController.java, there is a possible way to start foreground activity from the background due to an unsafe PendingIntent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-256590210

CPENameOperatorVersion
androideq13.0

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2023-20962