CVE-2023-40130

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege and background activity launch with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Oct 27, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-401317.0In GpuService of GpuService.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilegCVE-2023-401327.8In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permissions due to a missinCVE-2023-401335.5In multiple locations of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead CVE-2023-401343.3In isFullScreen of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local infCVE-2023-401353.3In applyCustomDescription of SaveUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead toCVE-2023-401363.3In setHeader of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local CVE-2023-401373.3In multiple functions of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead CVE-2023-401383.3In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local informatiCVE-2023-401395.5In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local informatiCVE-2023-401407.8In android_view_InputDevice_create of android_view_InputDevice.cpp, there is a possible way to execute arbitrary code due to a use after freCVE-2023-401417.8In temp_residency_name_store of thermal_metrics.c, there is a possible out of bounds write due to a missing bounds check. This could lead toCVE-2023-401427.8In TBD of TBD, there is a possible way to bypass carrier restrictions due to a logic error in the code. This could lead to local escalation