NetSight
IP …
high7.3

CVE-2026-45528

In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent.

Impact

In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Affected products

VendorProductAffected versions
GoogleAndroid
Versions 14.0, 15.0, 16.0, 17.0

Weakness classification

CWE-926

References