Lucene search

K
osvGoogleOSV:ASB-A-175614289
HistoryJul 01, 2021 - 12:00 a.m.

Information disclosure in timeout feature of the Notification

2021-07-0100:00:00
Google
osv.dev
16
information disclosure
notification
scheduletimeoutlocked
sensitive identifier
broadcasted intent
confused deputy
local information disclosure
user interaction
software

AI Score

5.2

Confidence

High

EPSS

0

Percentile

5.1%

In scheduleTimeoutLocked of NotificationRecord.java, there is a possible disclosure of a sensitive identifier via broadcasted intent due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Score

5.2

Confidence

High

EPSS

0

Percentile

5.1%

Related for OSV:ASB-A-175614289