CVE-2023-40097

Publication date

2023-12-04 22:40:54

Family

google_android

State

PUBLISHED

Description

In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.