ASB-A-278720336

In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

ASB-A-271851153

In setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2022-48520

Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2022-48519

Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2022-48519

Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2022-48520

Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality...

Spoofing

Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2022-48520

CVE-2022-48520 is described across multiple sources as an unauthorized access vulnerability affecting the SystemUI module, with confidentiality impact. The primary publicly referenced context relates to Huawei HarmonyOS/SystemUI (and related CNVD/CNNVD entries) and RedHat/NVD records reiterating ...

CVE-2022-48520

Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2022-48520

Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2022-48519

Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2022-48519

CVE-2022-48519 concerns Huawei HarmonyOS SystemUI: an unauthorized access vulnerability in the SystemUI module that may affect confidentiality. The NVD entry reports CVSSv3.1 base score 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, PRIVILEGES REQUIRED: NONE, USER INTERACTION: NONE...

CVE-2022-48519

Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality...

PT-2023-15845 · Systemui · Systemui

Name of the Vulnerable Software and Affected Versions: SystemUI affected versions not specified Description: The issue is related to an unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality. Recommendations: At the momen...

PT-2023-15847 · Systemui · Systemui

Name of the Vulnerable Software and Affected Versions: SystemUI affected versions not specified Description: The issue concerns an unauthorized access vulnerability in the SystemUI module, which may impact confidentiality upon successful exploitation. Recommendations: At the moment, there is no...

CVE-2023-21167

In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2023-21167

In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2023-21167

In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Out-of-bounds

In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2023-17955 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version 13 Description: A potential issue in the DevicePolicyManagerService.java could cause the SystemUI menu to crash due to a missing bounds check. This might lead to a local denial of service without requiring additional execution...