CyberRota Analysis
AI-GeneratedThe vulnerability in Java's StorageManagerService.java allows for a potential LaunchAnyWhere chain due to an unsafe PendingIntent, enabling local privilege escalation without requiring additional execution privileges. Exploitation necessitates user interaction, making it critical for developers and security teams working with Java applications to prioritize mitigation efforts. Users should be aware of the risks associated with this vulnerability, particularly in environments where untrusted applications may be executed.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.