Code injection

2023-12-2721:15:00

PRIOn knowledge base

www.prio-n.com

android

tv browser

code execution

explicit intent

vulnerability

7.6 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.4%

JSON

The com.altamirano.fabricio.tvbrowser TV browser application through 4.5.1 for Android is vulnerable to JavaScript code execution via an explicit intent due to an exposed MainActivity.

CPENameOperatorVersion
tv_browserle4.5.1

CPE	Name	Operator	Version
	tv_browser	le	4.5.1

References

github.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/AFC-POC.apk

github.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/CWE-94.md

github.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/TVBrowserDemo.gif