Threat database

There exists a TOCTOU race condition in TvSettings AppRestrictionsFragment.java that lead to start of attacker supplied activity in Settings’ context, i.e.system-uid context, thus lead to launchAnyWhere. The core idea is to utilize the time window between the check of Intent and the use to Intent to change the target component’s state, thus bypass the original security sanitize function.

EPSS 0.1%VulnerabilityAndroid#cwe-367Germany+7

In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251586912

KEVEPSS 0.3%VulnerabilityGermanyFrance+5

In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-220302519

KEVEPSS 1.5%VulnerabilityGermanyFrance+8

CVE-2011-1823 is a privilege escalation vulnerability in the Android OS where the vold volume manager daemon trusts messages from a PF_NETLINK socket. This flaw allows attackers to execute code with root privileges. It has been exploited in the wild and is associated with known Android malware such as GingerBreak and Lotoor.

CVE-2021-1048 is a use-after-free vulnerability in the Android kernel that enables privilege escalation. It has been exploited in the wild, indicating active attacks leveraging this flaw. The vulnerability affects the Android kernel but specific affected versions are not stated. No patch or remediation details are provided in the available data.

CVE-2021-0920 is a race condition vulnerability in the Android kernel that results in a use-after-free condition. This flaw can be exploited to escalate privileges on affected devices. The vulnerability has been observed in the wild, indicating active exploitation. No specific affected versions or patch information is provided in the available data.

CVE-2019-2215 is a use-after-free vulnerability in the Android Kernel's binder.c component that enables privilege escalation from an application to the Linux Kernel. It has been observed exploited in the wild, notably chained with CVE-2020-0041 and CVE-2020-0069 in the exploit chain known as "AbstractEmu." This vulnerability is classified as high severity due to its ability to elevate privileges on affected devices.

CVE-2020-0041 is an out-of-bounds write vulnerability in the Android Kernel's binder_transaction function due to an incorrect bounds check. This flaw can be exploited locally to escalate privileges. It has been observed in the wild as part of an exploit chain named "AbstractEmu," combined with other vulnerabilities CVE-2019-2215 and CVE-2020-0069. The vulnerability affects the Android Kernel but specific affected versions are not stated. The severity is high given its exploitation in the wild and potential for privilege escalation.