Nixpkgs security tracker

Try the new UI
Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed
(max. allowed matches exceeded)
Permalink CVE-2026-28663
created 1 week, 2 days ago Activity log
  • Created & dismissed (max. allowed matches exceeded) suggestion 1 week, 2 days ago
In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to …

In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

Android
  • ==16
  • ==17
  • ==16-qpr2