Local privilege escalation via background activity launch

Elevation of privilege in the Android 13 media session framework allows local users to launch arbitrary activities from the background. The setMediaButtonReceiver methods accepted a PendingIntent targeting an activity instead of rejecting or ignoring it, bypassing background-launch controls. A malicious app needs local execution but no further privileges or user interaction, and successful exploitation runs activities outside normal background restrictions.