CVE-2023-47883

The com.altamirano.fabricio.tvbrowser TV browser application through 4.5.1 for Android is vulnerable to JavaScript code execution via an explicit intent due to an exposed MainActivity...

CVE-2023-47882

The Kami Vision YI IoT Android app (com.yunyi.smartcamera) up to version 4.1.9_20231127 is vulnerable to remote JavaScript execution via an implicit intent targeting com.ants360.yicamera.activity.WebViewActivity. Root cause is likely unsafe handling of WebView content invoked through implicit int...

MercadoLibre: Account Takeover / Arbitrary File read and deletion / Partial code execution (intent redirection)

The vulnerability allowed for account takeover, arbitrary file read and deletion, and partial code execution through intent redirection. MercadoLibre acknowledged the issue and worked on a fix internally...

PT-2023-30838 · Unknown · Keychainactivity Application

Name of the Vulnerable Software and Affected Versions: KeyChainActivity Application affected versions not specified Description: The issue is related to missing permission checks, resulting in unauthorized access and manipulation in the KeyChainActivity Application. This allows an attacker to...

CVE-2023-42572

Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information...

CVE-2023-42572

Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information...

CVE-2023-42556

Improper usage of implicit intent in Contacts prior to SMR Dec-2023 Release 1 allows attacker to get sensitive information...

CVE-2023-33087

Memory corruption in Core while processing RX intent request...

Memory corruption

Memory corruption in Core while processing RX intent request...

Information disclosure

Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information...

CVE-2023-33087 Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Core

Memory corruption in Core while processing RX intent request...

CVE-2023-33087

CVE-2023-33087 describes a memory corruption in Core when processing RX intent requests in Qualcomm chipsets (buffer copy without checking input size). Reported base CVSSv3.1: 7.8 (HIGH) with LOCAL attack vector, LOW exploit complexity, and no user interaction; impacts confidentiality, integrity,...

CVE-2023-42572

CVE-2023-42572 affects Samsung Account Web SDK prior to version 1.5.24. The vulnerability is described as an implicit intent hijacking that could allow an attacker to obtain sensitive information. Documents consistently reference the affected component as the Samsung Account Web SDK and indicate ...

CVE-2023-42572

Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information...

CVE-2023-42556

Improper usage of implicit intent in Contacts prior to SMR Dec-2023 Release 1 allows attacker to get sensitive information...

CVE-2023-42556

CVE-2023-42556 affects Samsung Contacts prior to SMR Dec-2023 Release 1. The issue is due to improper usage of implicit intents in Contacts, enabling an attacker to obtain sensitive information. Affected component: Contacts (Samsung Mobile). Impact is limited to information disclosure; CVSS data ...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability previously existed in SAMSUNG Mobile devices version 1.5.24, which stemmed from an implicit intent hijacking vulnerability in the...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Mobile devices SMR Dec-2023 Release 1 version, which stemmed from improper use of Contacts with...

CVE-2023-40095

In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due to a missing check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40079

In injectSendIntentSender of ShortcutService.java, there is a possible background activity launch due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...