Design/Logic Flaw

2023-04-1920:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

logic

android-11

android-12

android-12l

android-13

escalation of privilege

user interaction

nvd

0.0004 Low

EPSS

Percentile

5.1%

JSON

In startInstrumentation of ActivityManagerService.java, there is a possible way to keep the foreground service alive while the app is in the background. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-237766679

CPENameOperatorVersion
androideq11.0
androideq12.0
androideq12.1
androideq13.0

Name	Operator	Version
android	eq	11.0
android	eq	12.0
android	eq	12.1
android	eq	13.0

References

source.android.com/security/bulletin/2023-04-01

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for PRION:CVE-2023-21089