Privilege escalation via improper Transaction validation

Improper input validation in Transaction on Android 13 before SMR Jul-2023 Release 1 allows local users to launch privileged activities. Samsung has not disclosed which Transaction input is mishandled or what validation was missing; it states only that added validation prevents privilege escalation. Exploitation requires local access to an affected Android 13 device, and the published consequence is privileged activity execution rather than code execution or service interruption.