GSD-2023-21272 — Vulnetix

GSD-2023-21272 PUBLISHED

In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Products

Vendor	Product	Versions
Google	Android	12L, 12, 11
google	android	11, 12, 12l

Timeline

Nov 28, 2020 CVE Published

References

https://android.googlesource.com/platform/frameworks/base/+/4dea696369a309cf39daa3e94fec7156c290a9c2 url
https://source.android.com/security/bulletin/2023-08-01 url

Open in Interactive Console →