CVE-2023-20963

This PoC exploits CVE-2023-20963, a vulnerability in Android's WorkSource parcel/unparcel logic, to bypass screen lock by manipulating Bundle data. It demonstrates a local privilege escalation by crafting malicious Parcel data to trigger unintended behavior in the Android framework.

This repository contains a proof-of-concept exploit for CVE-2023-20963, a vulnerability in Android's WorkSource parcel/unparcel logic. The exploit demonstrates a screen lock bypass by manipulating parcel data to launch arbitrary activities.

The repository contains a functional PoC for CVE-2023-20963, demonstrating a WorkSource parcel/unparcel mismatch vulnerability in Android 11-13. The exploit leverages malformed parcel data to trigger arbitrary code execution or privilege escalation.

This repository contains a proof-of-concept exploit for CVE-2023-20963, targeting Android's Autofill framework. The code includes test cases that demonstrate the vulnerability by manipulating focus events and autofill responses.