CVE-2024-0015

HIGH

Google Android Intent Redirection - Privilege Escalation

Title source: llm

Description

In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

Exploits (1)

nomisec STUB 18 stars

by UmVfX1BvaW50 · poc

https://github.com/UmVfX1BvaW50/CVE-2024-0015

View Code ZIP pw:eip

References (2)

[Patch, Vendor Advisory] https://source.android.com/security/bulletin/2024-01-01

[Mailing List, Patch] https://android.googlesource.com/platform/frameworks/base/+/2ce1b7fd37273ea19fbbb6daeeaa6212357b9a70

Scores

CVSS v3 7.8

EPSS 0.0396

EPSS Percentile 88.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-280

Status published

Products (4)

google/android 11.0

google/android 12.0

google/android 12.1

google/android 13.0

Published Feb 16, 2024

Tracked Since Feb 18, 2026