{"uuid": "32af58ce-bbcc-4a8f-aeaf-b9da8a636541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0044", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/1124", "content": "\ud83d\udea8POC RELEASED\ud83d\udea8CVE-2024-0044: a \"run-as any app\" high-severity vulnerability affecting Android versions 12 and 13\ud83d\udc47\n\n\"CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService[.]java file, is a high-severity vulnerability affecting Android versions 12 and 13.\n\nThis vulnerability allows an attacker to perform a \"run-as any app\" attack, leading to local escalation of privilege without requiring user interaction. The issue arises due to improper input validation within the createSessionInternal function.\n\nAn attacker can exploit this by manipulating the session creation process, potentially gaining unauthorized access to sensitive data and performing unauthorized actions on the affected device\u200b\"\n\nhttps://github.com/pl4int3xt/cve_2024_0044\n\nhttps://x.com/DarkWebInformer/status/1803484475298377961", "creation_timestamp": "2024-06-19T19:48:36.000000Z"}