Android Confused Deputy Vulnerability in ActivityStarter.java Allowing Local Privilege Escalation
Vulnerability
A vulnerability has been identified in the Android framework, specifically in the 'executeRequest' method of 'ActivityStarter.java'. This issue arises from a confused deputy problem, which creates a potential for unauthorized actions to be performed. Exploitation of this vulnerability could lead to local privilege escalation, allowing a user to gain elevated rights or access within the system. Notably, this vulnerability requires user interaction to be exploited.
Impact
Exploitation of this vulnerability could result in unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
