Lucene search

K
osvGoogleOSV:ASB-A-298635078
HistoryApr 01, 2024 - 12:00 a.m.

Requesting and setting notfication access on behalf of another user profile by CompanionDeviceManagerService#requestNotificationAccess

2024-04-0100:00:00
Google
osv.dev
15
companiondevicemanagerservice
notificationaccessconfirmationactivity
input validation
local information disclosure
user interaction
software

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.0%

In multiple functions of CompanionDeviceManagerService.java, there is a possible launch NotificationAccessConfirmationActivity of another user profile due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.0%

Related for OSV:ASB-A-298635078