CVE-2026-28612

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description A logic error in the resolveActivity() function within ActivityStarter.java allows for Intent Redirection attacks. This issue enables local escalation of privilege without requiring additional execution privileges or user interaction. Intent Redirection occurs when an application forwards an intent to another component without properly validating the destination, potentially allowing an attacker to launch private activities.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.