Skip to content
OpenAdvisories
High · 7.8 CVE-2023-40116 EUVD-2023-44723GHSA-9jm2-h589-xc6m

In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions due to a logic error …

Published Oct 27, 2023 · Updated May 5, 2025 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 12L, 12, 11 —

Advisories 2

References