Exploitation Summary
EIP tracks 2 public exploits for CVE-2023-20918. PoCs published by Trinadh465, pazhanivel07.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2023-20918, targeting Android's autofill framework. The code includes test cases that demonstrate the vulnerability by manipulating autofill services and callbacks.
Description
In getPendingIntentLaunchFlags of ActivityOptions.java, there is a possible elevation of privilege due to a confused deputy with no additional execution privileges needed. User interaction is not needed for exploitation.
Exploits (2)
This repository contains a proof-of-concept exploit for CVE-2023-20918, targeting Android's autofill framework. The code includes test cases that demonstrate the vulnerability by manipulating autofill services and callbacks.
This repository contains a proof-of-concept for CVE-2023-20918, focusing on autofill performance tests in Android. The code demonstrates how autofill services can be manipulated to trigger performance issues or unexpected behavior.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H