Exploitation Summary
EIP tracks 1 public exploit for CVE-2023-40130. PoCs published by wrlu.
AI-analyzed exploit summary This repository contains a functional proof-of-concept exploit for CVE-2023-40130, demonstrating a local privilege escalation vulnerability in Android's CallRedirectionService. The exploit leverages a JobService to execute arbitrary activities via PendingIntent, bypassing intended restrictions.
Description
In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege and background activity launch with no additional execution privileges needed. User interaction is not needed for exploitation.
Exploits (1)
This repository contains a functional proof-of-concept exploit for CVE-2023-40130, demonstrating a local privilege escalation vulnerability in Android's CallRedirectionService. The exploit leverages a JobService to execute arbitrary activities via PendingIntent, bypassing intended restrictions.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H