CVE-2023-21145
Assigner: google_android
Published: 2023-07-12T23:18:53.112Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Android
vendor: Google
versions: status: affected
version: 13
status: affected
version: 12L
status: affected
version: 12
status: affected
version: 11
descriptions: supportingMedia: base64: no
type: text/html
value: <p>In updatePictureInPictureMode of ActivityRecord.java, there is a possible bypass of background launch restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.</p>
value: In updatePictureInPictureMode of ActivityRecord.java, there is a possible bypass of background launch restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


problemTypes: descriptions: description: Elevation of privilege