ASB-A-211481342

    Dashboard / Vulnerabilities / ASB-A-211481342

    ASB-A-211481342

    Published: 1 May 2022Last Modified: 25 Sept 2026

    Summary:

    Details: In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app that believes it's still in the foreground, when it is not, due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

    References: https://source.android.com/security/bulletin/2022-05-01, https://android.googlesource.com/platform/frameworks/base/+/9a1dfd9a9de3bb33cd81e3003251b49f7862f276

    Affected packages

    Package

    Name: platform/frameworks/base

    Purl:

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 10:0
    Fixed -10:2022-05-01

    Affected versions

    10

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    ASB-A-211481342 | CVE-DB