5 matches found
CVE-2023-40132
In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...
CVE-2023-40132
The Android operating system contains an Elevation of Privilege (EoP) vulnerability (CVE-2023-40132) within the Framework component, specifically in RingtoneManager.java at the setActualDefaultRingtoneUri function. The root cause is a missing permission check , which allows an attacker to bypass ...
CVE-2023-40132
In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...
PT-2025-1030 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions affected versions not specified Description: The issue is related to a component of the Android operating system, specifically a buffer copy without size check in the Media Framework. It allows an attacker to escalate...