Lucene search
Google_androidVULNRICHMENT:CVE-2023-40075HistoryDec 04, 2023 - 10:40 p.m.
CVE-2023-40075
2023-12-0422:40:50
google_android
github.com
1
local denial of service
missing bounds check
shortcutpackage.java
cve-2023-40075
unlimited packages
boot loop
no user interaction
In forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register unlimited packages due to a missing bounds check. This could lead to local denial of service which results in a boot loop with no additional execution privileges needed. User interaction is not needed for exploitation.
Related
nvd
nvd
CVE-2023-40075
2023-12-04 23:15:23
prion
prion
Out-of-bounds
2023-12-04 23:15:00
osv
osv
PDoS using addDynamicShortcuts to bypass app-level shortcut limits
2023-12-01 00:00:00
cve
cve
CVE-2023-40075
2023-12-04 23:15:23
cvelist
cvelist
CVE-2023-40075
2023-12-04 22:40:50
AI Score
6.7
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2023-40075