CVE-2023-40116: SourceRectHint Animation in PIP Component can cause restriction bypass in Android Frameworks Base
Summary
CVE-2023-40116: In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions due to a logic error in the code. Affects platform/frameworks/base across 3 version ranges.
>= 11:0, < 11:2023-10-01
>= 12:0, < 12:2023-10-01
>= 12L:0, < 12L:2023-10-01
Fixed in 11:2023-10-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Android Frameworks Base is a core component of the Android operating system that provides essential functionalities and services to other system components and applications. It includes various libraries, APIs, and system services that enable the development and execution of Android applications. The Picture-in-Picture (PIP) component is responsible for displaying a small, resizable window for video playback or other content while allowing users to continue interacting with other apps. This vulnerability affects the PIP component in Android Frameworks Base.
Vulnerability Detail
The vulnerability (CVE-2023-40116) originates from a logic error in the code of the PipTaskOrganizer.java file, specifically in the onTaskAppeared function. This flaw allows for the bypassing of background activity launch restrictions, potentially leading to a local escalation of privilege. Exploiting this vulnerability does not require any additional execution privileges or user interaction. The consequences of successful exploitation could include unauthorized access to sensitive information or the ability to perform malicious actions with elevated privileges.
How To Fix
Minimum fixed version
11:2023-10-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been provided for this vulnerability. It is recommended to apply the patches as mentioned in the 'how_to_fix' section.
Conclusion
The vulnerability (CVE-2023-40116) in the SourceRectHint Animation in the PIP Component of Android Frameworks Base allows for the bypassing of background activity launch restrictions, potentially leading to a local escalation of privilege. It is crucial to apply the provided patches to mitigate the risk associated with this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/frameworks/base →
FAQ
Android Frameworks Base is a core component of the Android operating system that provides essential functionalities and services to other system components and applications.
The Picture-in-Picture (PIP) component is responsible for displaying a small, resizable window for video playback or other content while allowing users to continue interacting with other apps.
The vulnerability allows for the bypassing of background activity launch restrictions, potentially leading to a local escalation of privilege. Successful exploitation could result in unauthorized access to sensitive information or the ability to perform malicious actions with elevated privileges.
No, user interaction is not needed for exploitation of this vulnerability.
The patches for this vulnerability can be obtained from the following sources:
- Android 11: https://android.googlesource.com/platform/frameworks/base/+/18c3b194642f3949d09e48c21da5658fa04994c8
- Android 12: https://android.googlesource.com/platform/frameworks/base/+/18c3b194642f3949d09e48c21da5658fa04994c8
- Android 12L: https://android.googlesource.com/platform/frameworks/base/+/18c3b194642f3949d09e48c21da5658fa04994c8
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/base.
