CoreCVE
Back

HIGH

In startInstrumentation of ActivityManagerService.java, there is a possible way to keep the foreground service alive while the app is in the background

Published Apr 19, 2023

Description

In startInstrumentation of ActivityManagerService.java, there is a possible way to keep the foreground service alive while the app is in the background. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-237766679

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner google_android
Published Apr 19, 2023
Updated Feb 5, 2025
Reserved Nov 3, 2022
Link CVE-2023-21089

CISA Vulnrichment

Updated Feb 5, 2025

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2023-21089

Red Hat

No data

ENISA EUVD

Assigner google_android
Published Apr 19, 2023
Updated Feb 5, 2025
Link EUVD-2023-25257

GitHub

No data