PT-2023-8313 · Google · Android

CVE-2023-21312

·

Publicado

2023-10-04

·

Atualizado

2023-11-06

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Android (affected versions not specified)
Description The issue is related to a component called IntentResolver in the Android operating system, which has inadequate access control. This could lead to local information disclosure without needing additional execution privileges. User interaction is not required for exploitation. The problem is associated with a confused deputy, allowing for a possible cross-user media read.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2024-00427
CVE-2023-21312

Produtos afetados

Android