CVE-2021-39758: Presentation can make the app start activities in the background
Summary
CVE-2021-39758: In createPresentationContext of Presentation.java, there is a possible way to start a foreground activity from background due to a missing permission check. Affects platform/frameworks/base across 3 version ranges.
>= 10:0, < 10:2022-10-01
>= 11:0, < 11:2022-10-01
>= 12:0, < 12:2022-10-01
Fixed in 10:2022-10-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package under scrutiny is platform/frameworks/base in the Android ecosystem. This package is responsible for providing the fundamental building blocks and essential components for the Android operating system. It includes core functionalities such as activity and window management, resource handling, and system services. The vulnerability in this package allows the Presentation feature to start activities in the background without the necessary permission check. This can potentially lead to a local escalation of privilege, enabling an attacker to gain elevated privileges without requiring additional execution privileges or user interaction.
Vulnerability Detail
The vulnerability, identified as CVE-2021-39758, resides in the createPresentationContext function of Presentation.java. Due to a missing permission check, this function allows the app to start a foreground activity from the background. This security flaw can be exploited to achieve local escalation of privilege, granting an attacker elevated privileges without the need for additional execution privileges or user interaction. The impact of this vulnerability can be significant, as it allows an attacker to perform unauthorized actions and potentially compromise the integrity and confidentiality of the affected system.
How To Fix
Minimum fixed version
10:2022-10-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the vulnerability in the platform/frameworks/base package allows the Presentation feature to start activities in the background without the necessary permission check. This can lead to a local escalation of privilege, granting an attacker elevated privileges without additional execution privileges or user interaction. It is crucial to apply the provided fix from the Android Open Source Project and keep the Android operating system up to date to mitigate the risk associated with this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/frameworks/base →
FAQ
This vulnerability allows an attacker to start activities in the background without the necessary permission check, leading to a local escalation of privilege. It can potentially grant the attacker elevated privileges and enable unauthorized actions on the affected system.
No, user interaction is not needed for exploitation of this vulnerability.
The vulnerability was introduced in Android 10 and affects versions 10, 11, and 12 of the Android operating system.
There are no known instances of this vulnerability being exploited in the wild at the time of this report.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities in software using just the gradle.lockfile, without requiring access to the code or installation.
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/base.
