CVE-2023-40136

In setHeader of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40136

creationtimestamp| type| source ---|---|--- 2023-10-28 00:17:21+00:00| seen| https://t.me/cibsecurity/73081 2025-02-03 19:33:09+00:00| seen| https://vulnerability.circl.lu/bundle/cf59c148-4047-4ccd-8ba0-26fb7197899c...

CVE-2023-40136

The CVE-2023-40136 entry corresponds to a local information disclosure in Android via DialogFillUi.java setHeader, caused by a confused deputy that allows viewing another user’s images without extra privileges or user interaction. Connected sources (including PT-Security PT-2023-27288 and Android...