CVE-2026-45528

Summary

In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Affected Software

VendorProductVersion RangeStatus
GoogleAndroid17affected
GoogleAndroid16-qpr2affected
GoogleAndroid16affected
GoogleAndroid15affected
GoogleAndroid14affected

Weaknesses

  • Elevation of privilege

References