CVE-2022-20475: Task hijacking of apps that set allowTaskReparenting="true"
Summary
CVE-2022-20475: In test of ResetTargetTaskHelper.java, there is a possible hijacking of any app which sets allowTaskReparenting="true" due to a confused deputy. Affects platform/frameworks/base across 4 version ranges.
>= 11:0, < 11:2022-12-01
>= 12:0, < 12:2022-12-01
>= 12L:0, < 12L:2022-12-01
>= 13:0, < 13:2022-12-01
Fixed in 11:2022-12-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package under scrutiny is platform/frameworks/base in the Android ecosystem. This package is responsible for providing the fundamental functionalities and components of the Android operating system. It includes various modules and libraries that handle core system services, user interfaces, and application frameworks. One of the features provided by this package is the ability for apps to set the allowTaskReparenting attribute to "true". This attribute allows an app's tasks to be reparented to a different task, enabling seamless transitions between different apps. However, a vulnerability has been identified in the implementation of this feature.
Vulnerability Detail
The vulnerability in platform/frameworks/base allows for task hijacking of any app that sets allowTaskReparenting="true". This vulnerability arises due to a confused deputy scenario. An attacker can exploit this vulnerability to escalate their privileges locally without requiring any additional execution privileges. The exploitation does not require user interaction. By hijacking the tasks of other apps, an attacker can gain unauthorized access to sensitive information or perform malicious actions on behalf of the hijacked app.
How To Fix
Minimum fixed version
11:2022-12-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the vulnerability CVE-2022-20475 in platform/frameworks/base allows for task hijacking of apps that set allowTaskReparenting="true". This can lead to local escalation of privilege without requiring additional execution privileges. It is crucial to apply the provided fix to mitigate the vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/frameworks/base →
FAQ
This vulnerability allows an attacker to hijack the tasks of any app that sets allowTaskReparenting="true". This can lead to unauthorized access to sensitive information or the ability to perform malicious actions on behalf of the hijacked app.
No, this vulnerability does not require user interaction for exploitation.
The vulnerability was introduced in version 11 of the package and has been fixed in versions 11, 12, 12L, and 13.
There is no known exploit for this vulnerability at the time of this report.
The recommended mitigation is to apply the provided fix from the Android Open Source Project (AOSP) and update the affected package to a version that includes the fix.
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/base.
