Lucene search
PRIOn knowledge basePRION:CVE-2023-21394HistoryOct 30, 2023 - 6:15 p.m.
Information disclosure
2023-10-3018:15:00
PRIOn knowledge base
www.prio-n.com
1
registerphoneaccount
image reveal
missing permission check
local information disclosure
user interaction
In registerPhoneAccount of TelecomServiceImpl.java, there is a possible way to reveal images from another user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Related
cve
cve
CVE-2023-21394
2023-10-30 18:15:09
nvd
nvd
CVE-2023-21394
2023-10-30 18:15:09
osv
osv
Reveal images across users via TelecomManager#registerPhoneAccount
2023-12-01 00:00:00
cvelist
cvelist
CVE-2023-21394
2023-10-30 17:01:38
androidsecurity
androidsecurity
Android 14 Security Release Notes
2023-10-04 00:00:00