CVE-2023-23464

CVE-2023‑23464 concerns Media CP Media Control Panel. A Permissive Flash cross‑domain policy may allow information disclosure, constituting a confidentiality risk (C/H) with no explicit exploitation status or remediation details provided in the supplied documents. Affected software/component: Med...

CVE-2022-20545

In bindArtworkAndColors of MediaControlPanel.java, there is a possible way to crash the phone due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2022-14758 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to improper input validation in the bindArtworkAndColors function of MediaControlPanel.java. This could lead to a remote denial of service, where the phone may crash, with no...

CVE-2022-20545

CVE-2022-20545 affects Android 13 on Google Pixel devices. The issue resides in the MediaControlPanel.java function bindArtworkAndColors, where improper input validation can crash the phone, causing a remote denial of service with no additional execution privileges required. Exploitation does not...