In AppWidget, there is a possible way to start an...
High severity
Unreviewed
Published
Aug 13, 2022
to the GitHub Advisory Database
•
Updated Jan 28, 2023
Description
Published by the National Vulnerability Database
Aug 12, 2022
Published to the GitHub Advisory Database
Aug 13, 2022
Last updated
Jan 28, 2023
In AppWidget, there is a possible way to start an activity from the background due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-204083104
References