CVE-2023-40097

Summary

CVE-2023-40097 is a vulnerability affecting the hasPermissionForActivity function in PackageManagerHelper.java. This issue arises due to insufficient input validation for URI parameters. An attacker who can manipulate a URI could potentially escalate local privileges, gaining heightened access within the system. However, it's important to note that user interaction is required for an exploit to take place.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.