Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-40098
HistoryDec 04, 2023 - 11:15 p.m.

Information disclosure

2023-12-0423:15:00
PRIOn knowledge base
www.prio-n.com
2
information disclosure
logic error
notification data access
local disclosure
no user interaction

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
androideq12.0
androideq12.1
androideq13.0
androideq14.0

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2023-40098