CVE-2023-43955

2023-12-2700:00:00

mitre

www.cve.org

android

tv bro

web security

cve-2023-43955

webview

javascript

code execution

file creation

downloads

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

61.7%

JSON

The com.phlox.tvwebbrowser TV Bro application through 2.0.0 for Android mishandles external intents through WebView. This allows attackers to execute arbitrary code, create arbitrary files. and perform arbitrary downloads via JavaScript that uses takeBlobDownloadData.