ASB-A-271845008 — Vulnetix

ASB-A-271845008 PUBLISHED

In bindPlayer of MediaControlPanel.java, there is a possible launch arbitrary activity in SysUI due to Unsafe Intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Products

Vendor	Product	Versions
platform	frameworks/base	13-next, 13:0, 13

Timeline

Jun 1, 2023 CVE Published
May 15, 2026 CVE Updated

References

https://source.android.com/security/bulletin/2023-06-01 advisory
https://android.googlesource.com/platform/frameworks/base/+/b8e6044520761f537473d0a04a651118236d2c52 patch
https://android.googlesource.com/platform/frameworks/base/+/0f857518e3dd6490508a88ceac39309e77cb231b patch
https://android.googlesource.com/platform/frameworks/base/+/d9bdeafe811e24d2bee3b2025b77d02ac6b8cbd9 patch

Open in Interactive Console →