CyberRota Analysis
AI-GeneratedA vulnerability in the Java framework allows for unauthorized read/write access to private files through a confused deputy scenario in the assertSafeToStartCustomActivity function of AppRestrictionsFragment.java. This could result in local privilege escalation without requiring any additional execution privileges or user interaction. Organizations using affected Java products should prioritize addressing this vulnerability to mitigate potential risks to sensitive data.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Related CVEs
Other vulnerabilities affecting the same vendor(s)