CVEvulnerability
CVE-2023-35676
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-09-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-269
Description
In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected configurations
• google android 12.0
• google android 12.1
• google android 13.0
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- https://android.googlesource.com/platform/frameworks/base/+/109e58b62dc9fedcee93983678ef9d4931e72afa Vendor Advisory
- https://source.android.com/security/bulletin/2023-09-01 Vendor Advisory
- https://android.googlesource.com/platform/frameworks/base/+/109e58b62dc9fedcee93983678ef9d4931e72afa Vendor Advisory
- https://source.android.com/security/bulletin/2023-09-01 Vendor Advisory