ASB-A-242605257 — Vulnetix

ASB-A-242605257 PUBLISHED

In onTargetSelected of ResolverActivity.java, there is a possible way to share a wrong file due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Products

Vendor	Product	Versions
platform	frameworks/base	13-next, 11:0, 12:0

Timeline

Mar 1, 2023 CVE Published
May 15, 2026 CVE Updated

References

https://source.android.com/security/bulletin/2023-03-01 advisory
https://android.googlesource.com/platform/frameworks/base/+/a4fe4bd9a23bccbe29d72bebd6a028ce83383838 patch
https://android.googlesource.com/platform/frameworks/base/+/15e2b0fe84fe080e8d3603bbcb3488ec13ff5c41 patch

Open in Interactive Console →