Lucene search

K
osvGoogleOSV:ASB-A-285142084
HistoryJan 01, 2024 - 12:00 a.m.

Camera - Access to user location without any permissions

2024-01-0100:00:00
Google
osv.dev
21
camera
permissions bypass
information disclosure
user interaction
software

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.0%

In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.0%

Related for OSV:ASB-A-285142084