Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Reworded the Risk Assessment and Automated Detection sections in terms of explicit intents

...

Code Block
bgColor#CCCCFF
TBD

Risk Assessment

Passing Failing to pass an implicit explicit intent to a pending intent could allow the intent to be misdirected, thereby leaking sensitive information and/or altering the data flow within an app.

Rule

Severity

Likelihood

Remediation Cost

Priority

Level

DRD05DRD21-J

Medium

Probable

Medium

P8

L2

Automated Detection

Automatic detection of the passing of an implicit intent It is straightforward to automatically detect when the intent passed to a pending intent is straightforwardnot an explicit intent.

Bibliography