PT-2023-18239 · Unknown · Call Settings

CVE-2023-21486

·

Publicado

2023-05-04

·

Atualizado

2023-05-10

CVSS v3.1

5.3

Média

VetorAV:P/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Call Settings versions prior to SMR May-2023 Release 1
Description The issue allows physical attackers to access some media data stored in sandbox due to an improper export of android application components vulnerability in ImagePreviewActivity.
Recommendations For versions prior to SMR May-2023 Release 1, update to SMR May-2023 Release 1 or later to resolve the issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-926

Identificadores relacionados

CVE-2023-21486

Produtos afetados

Call Settings