CVE-2023-44121 LG ThinQ Service - Intent redirection with system privilege/LaunchAnyWhere

The vulnerability is an intent redirection in LG ThinQ Service "com.lge.lms2" in the "com/lge/lms/things/ui/notification/NotificationManager.java" file. This vulnerability could be exploited by a third-party app installed on an LG device by sending a broadcast with the action...

CVE-2023-44121 LG ThinQ Service - Intent redirection with system privilege/LaunchAnyWhere

The vulnerability is an intent redirection in LG ThinQ Service "com.lge.lms2" in the "com/lge/lms/things/ui/notification/NotificationManager.java" file. This vulnerability could be exploited by a third-party app installed on an LG device by sending a broadcast with the action...

CVE-2023-44121

CVE-2023-44121 describes an intent redirection in LG ThinQ Service (com.lge.lms2), specifically in NotificationManager.java, exploitable by a third‑party app via a broadcast with action com.lge.lms.things.notification.ACTION. The vulnerability is dangerous because LG ThinQ Service is a system app...

VulnCheck KEV: CVE-2021-23957

Navigations through the Android-specific intent URL scheme could have been misused to escape iframe sandbox. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox 85...

PT-2023-29123 · Google · Com.Android.Mms

Name of the Vulnerable Software and Affected Versions: com.android.mms affected versions not specified Description: The issue allows an attacker to forward controlled intents back to themselves through the exported "com.android.mms.ui.QClipIntentReceiverActivity" activity in the Messaging app...

CVE-2023-44124: Use of Implicit Intent for Sensitive Communication

The vulnerability is to theft of arbitrary files with system privilege in the Screen recording "com.lge.gametools.gamerecorder" app in the "com/lge/gametools/gamerecorder/settings/ProfilePreferenceFragment.java" file. The main problem is that the app launches implicit intents that can be...

CVE-2023-44129: Improper Export of Android Application Components

The vulnerability is that the Messaging "com.android.mms" app patched by LG forwards attacker-controlled intents back to the attacker in the exported "com.android.mms.ui.QClipIntentReceiverActivity" activity. The attacker can abuse this functionality by launching this activity and then sending a...

CVE-2023-44122: Use of Implicit Intent for Sensitive Communication

The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings "com.lge.lockscreensettings" app in the "com/lge/lockscreensettings/dynamicwallpaper/MyCategoryGuideActivity.java" file. The main problem is that the app launches implicit intents that can be...

PT-2023-29115 · Lg · Lg Thinq Service

Name of the Vulnerable Software and Affected Versions: LG ThinQ Service affected versions not specified Description: The issue is an intent redirection in the LG ThinQ Service, specifically in the "com/lge/lms/things/ui/notification/NotificationManager.java" file. This could be exploited by a...

CVE-2023-44127: Use of Implicit Intent for Sensitive Communication

he vulnerability is that the Call management "com.android.server.telecom" app patched by LG launches implicit intents that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as contact details and phone numbers...

CVE-2023-44121: Improper Export of Android Application Components

The vulnerability is an intent redirection in LG ThinQ Service "com.lge.lms2" in the "com/lge/lms/things/ui/notification/NotificationManager.java" file. This vulnerability could be exploited by a third-party app installed on an LG device by sending a broadcast with the action...

Improper validation of intent data received in TextViewerActivity allows opening of arbitrary files in hamza417/inure

Description Tested on Build89 of the Inure application. It was discovered that the application had an exported activity .activities.association.TextViewerActivity which accepted intent data via the file scheme + text/ mime type and opened the associated files from provided URI data string. The...

CVE-2023-31014

NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implicit intent meant for the streamer component. A successful exploit of this vulnerability may lead to limited information disclosure, denial ...

Design/Logic Flaw

NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implicit intent meant for the streamer component. A successful exploit of this vulnerability may lead to limited information disclosure, denial ...

CVE-2023-31014

NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implicit intent meant for the streamer component. A successful exploit of this vulnerability may lead to limited information disclosure, denial ...

CVE-2023-31014

NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implicit intent meant for the streamer component. A successful exploit of this vulnerability may lead to limited information disclosure, denial ...

NVIDIA GeForce Now Security Vulnerability

NVIDIA GeForce Now NVIDIA GeForce Now,NVIDIA GeForce Now is an open cloud gaming platform from NVIDIA, USA. NVIDIA GeForce A security vulnerability exists in NVIDIA GeForce that stems from a flaw in the game launcher component, where a malicious application on the same device can handle the...

CVE-2023-31014: Use of Implicit Intent for Sensitive Communication

NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implicit intent meant for the streamer component. A successful exploit of this vulnerability may lead to limited information disclosure, denial ...

CVE-2023-42468

The com.cutestudio.colordialer application through 2.1.8-2 for Android allows a remote attacker to initiate phone calls without user consent, because of improper export of the com.cutestudio.dialer.activities.DialerActivity component. A third-party application without any permissions can craft an...

Design/Logic Flaw

The com.cutestudio.colordialer application through 2.1.8-2 for Android allows a remote attacker to initiate phone calls without user consent, because of improper export of the com.cutestudio.dialer.activities.DialerActivity component. A third-party application without any permissions can craft an...