High · 7.8 CVE-2023-35682 EUVD-2023-39682GHSA-q65h-4m9g-qrqf

In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to a confused deputy. T…

Published Sep 11, 2023 · Updated May 5, 2025 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Affected products

Vendor	Product	Affected	Fixed
Google	Android	13, 12L, 12, 11	—

Advisories 2

WID-SEC-2023-2273 Google Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 5, 2023
WID-SEC-2023-2272 Samsung Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 5, 2023

References

https://android.googlesource.com/platform/packages/apps/Launcher3/+/09f8b0e52e45a0b39bab457534ba2e5ae91ffad0
https://source.android.com/security/bulletin/2023-09-01

EUVD	v3.1	7.8
CISA-ADP	v3.1	7.8