ASB-A-240663194 — Vulnetix

ASB-A-240663194 PUBLISHED

In test of ResetTargetTaskHelper.java, there is a possible hijacking of any app which sets allowTaskReparenting="true" due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Products

Vendor	Product	Versions
platform	frameworks/base	12:0, 12, 12L:0

Timeline

Dec 1, 2022 CVE Published
May 15, 2026 CVE Updated

References

https://source.android.com/security/bulletin/2022-12-01 advisory
https://android.googlesource.com/platform/frameworks/base/+/f19d69f26fefb95d2f349cc66459691f434ac0a6 patch

Open in Interactive Console →