268 matches found
CVE-2023-52715
The SystemUI module has a vulnerability in permission management. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2023-52715
CVE-2023-52715 affects Huawei HarmonyOS SystemUI module with a privilege/permission management vulnerability. The available documents describe impact to availability and a high-severity CVSS v3.1 rating (7.5, NETWORK attack vector, LOW complexity, NO privileges required, NO user interaction). The...
CVE-2023-52715
The SystemUI module has a vulnerability in permission management. Impact: Successful exploitation of this vulnerability may affect availability...
PT-2024-14706 · Systemui · Systemui
Name of the Vulnerable Software and Affected Versions: SystemUI affected versions not specified Description: The issue concerns a vulnerability in permission management within the SystemUI module. Successful exploitation of this vulnerability may affect availability. Recommendations: At the momen...
CVE-2023-52715: Incorrect Permission Assignment for Critical Resource
The SystemUI module has a vulnerability in permission management. Impact: Successful exploitation of this vulnerability may affect availability...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege management vulnerability exists in the Huawei HarmonyOS SystemUI module, which can be exploited by attackers to affect availability...
CVE-2024-0019
In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when restarting systemUI due to a missing check for active recordings. This could lead to local denial of service with no additional execution privileges needed. User interaction is need...
Design/Logic Flaw
In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when restarting systemUI due to a missing check for active recordings. This could lead to local denial of service with no additional execution privileges needed. User interaction is need...
CVE-2024-0019
The CVE-2024-0019 issue affects Android’s AppOpsControllerImpl.setListening in the Framework. A missing check for active recordings can allow hiding the microphone privacy indicator when SystemUI restarts, enabling local denial of service without extra privileges. Impact is limited to DoS on the ...
CVE-2024-0019
In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when restarting systemUI due to a missing check for active recordings. This could lead to local denial of service with no additional execution privileges needed. User interaction is need...
CVE-2024-0019: Incorrect Permission Assignment for Critical Resource
In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when restarting systemUI due to a missing check for active recordings. This could lead to local denial of service with no additional execution privileges needed. User interaction is need...
ASB-A-294104969
In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when restarting systemUI due to a missing check for active recordings. This could lead to local denial of service with no additional execution privileges needed. User interaction is need...
CVE-2023-42568
CVE-2023-42568 affects SmartManagerCN prior to SMR Dec-2023 Release 1. The root cause is improper access control, enabling local attackers to access arbitrary files with system privileges. Public records in NVD/Red Hat/PRION reinforce the same impact and 해당 Samsung advisories reference SMR Dec-20...
ASB-A-288110451
In verifyShortcutInfoPackage of ShortcutService.java, there is a possible way to see another user's image due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-288896269
In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitatio...
ASB-A-272025416
In multiple locations, there is a possible cross-user read due to a confused deputy. This could lead to local information disclosure of photos or other images with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-278720336
In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
ASB-A-271851153
In setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...