Lucene search
PRIOn knowledge basePRION:CVE-2023-21292HistoryAug 14, 2023 - 10:15 p.m.
Design/Logic Flaw
2023-08-1422:15:00
PRIOn knowledge base
www.prio-n.com
4
design flaw
logic flaw
information disclosure
local
exploitation
user interaction
In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted files due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Related
nvd
nvd
CVE-2023-21292
2023-08-14 22:15:13
cnvd
cnvd
Google Android Information Disclosure Vulnerability (CNVD-2023-82064)
2023-08-16 00:00:00
cvelist
cvelist
CVE-2023-21292
2023-08-14 21:08:38
osv
osv
Calling ContentProvider.openFile() with Binding.getCallingUid() == 1000
2023-08-01 00:00:00
cve
cve
CVE-2023-21292
2023-08-14 22:15:13