CVE-2023-40097

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
GoogleAndroid13; 12L; 12; 11

References

Timeline

Published
Dec 4, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-400985.5In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic erroCVE-2023-401007.8In discovery_thread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalCVE-2023-401015.5In collapse of canonicalize_md.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local informationCVE-2023-401037.8In multiple locations, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege withCVE-2023-401047.5In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. This could lead to remotCVE-2023-401055.5In backupAgentCreated of ActivityManagerService.java, there is a possible way to leak sensitive data due to a missing permission check. ThisCVE-2023-401067.8In sanitizeSbn of NotificationManagerService.java, there is a possible way to launch an activity from the background due to BAL Bypass. ThisCVE-2023-401077.8In ARTPWriter of ARTPWriter.cpp, there is a possible use after free due to uninitialized data. This could lead to local escalation of privilCVE-2023-401085.5In multiple locations, there is a possible way to access media content belonging to another user due to a missing permission check. This couCVE-2023-401097.8In createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL) due to a permissions bypass. This could lCVE-2023-40117.5An issue has been discovered in GitLab EE affecting all versions from 15.11 prior to 16.2.2 which allows an attacker to spike the resource cCVE-2023-401107.8In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local esca
CVE-2023-40097: High severity, CVSS 7.8 | Vulnix