VDB
GSD-2023-21286
GSD-2023-21286
PUBLISHED
In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Android | 11, 13, 12L | |
| android | 11, 12, 12l |
Timeline
- Nov 28, 2020 CVE Published