CVE-2023-48418

In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-48418

creationtimestamp| type| source ---|---|--- 2024-01-03 00:26:49+00:00| seen| https://t.me/ctinow/162112 2024-01-03 01:38:32+00:00| seen| https://t.me/cibsecurity/74216 2024-01-17 11:45:18+00:00| published-proof-of-concept| https://t.me/androidMalware/2118 2024-01-23 10:56:17+00:00| seen|...

CVE-2023-48418 User Build misconfiguration resulting in local escalation of privilege

In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for ...

CVE-2023-48418 User Build misconfiguration resulting in local escalation of privilege

In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for ...

CVE-2023-48418

CVE-2023-48418 is a local elevation-of-privilege issue in Google Pixel Watch related to an insecure default in the checkDebuggingDisallowed function of DeviceVersionFragment.java. The vulnerability allows an attacker to access ADB before SUW completion, potentially gaining root privileges with no...