Lucene search

PRIOn knowledge basePRION:CVE-2023-40137

HistoryOct 27, 2023 - 9:15 p.m.

Information disclosure

2023-10-2721:15:00

PRIOn knowledge base

www.prio-n.com

multiple functions

user images

local information disclosure

exploitation

no user interaction

3.8 Low

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

In multiple functions of DialogFillUi.java, there is a possible way to view another user’s images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
androideq11.0
androideq12.0
androideq12.1
androideq13.0

Name	Operator	Version
android	eq	11.0
android	eq	12.0
android	eq	12.1
android	eq	13.0

References

android.googlesource.com/platform/frameworks/base/+/08becc8c600f14c5529115cc1a1e0c97cd503f33

source.android.com/security/bulletin/2023-10-01