Android DocumentsUI Confused Deputy Vulnerability Allowing Privilege Escalation

A vulnerability has been identified in the PickActivity.java file of the Android DocumentsUI application. This issue arises from a confused deputy problem, which creates a potential avenue for starting any activity as a DocumentsUI app. Exploiting this vulnerability could lead to local privilege escalation, with no additional execution privileges required. Notably, user interaction is not necessary for exploitation.

Impact

Exploitation of this vulnerability could result in unauthorized access to elevated privileges within the affected application or system.