7 matches found
CVE-2023-40132
In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...
CVE-2023-40132
creationtimestamp| type| source ---|---|--- 2025-01-21 23:16:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbybvyeja2r 2025-01-22 18:02:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2594 2025-03-24 16:22:50+00:00| seen|...
CVE-2023-40132
In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...
CVE-2023-40132
In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...
CVE-2023-40132
The Android operating system contains an Elevation of Privilege (EoP) vulnerability (CVE-2023-40132) within the Framework component, specifically in RingtoneManager.java at the setActualDefaultRingtoneUri function. The root cause is a missing permission check , which allows an attacker to bypass ...
CVE-2023-40132
In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...
CVE-2023-40132
In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...