ASB-A-215003903 — Vulnetix

ASB-A-215003903 PUBLISHED

In shouldAllowFgsWhileInUsePermissionLocked of ActiveServices.java, there is a possible way to start foreground service from background due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Products

Vendor	Product	Versions
platform	frameworks/base	11:0, 12:0, 12

Timeline

Aug 1, 2022 CVE Published
May 15, 2026 CVE Updated

References

https://source.android.com/security/bulletin/2022-08-01 advisory
https://android.googlesource.com/platform/frameworks/base/+/05cd832c241a543feb3a833e75b56c6f253b05e9 patch
https://android.googlesource.com/platform/frameworks/base/+/7fa1b4d0657c1fcf88a1588863e16e4e468201a1 patch

Open in Interactive Console →