Lucene search

K
vulnrichmentGoogle_androidVULNRICHMENT:CVE-2023-40133
HistoryOct 27, 2023 - 8:22 p.m.

CVE-2023-40133

2023-10-2720:22:58
google_android
github.com
1
dialogfillui
information disclosure
user images

AI Score

6.2

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In multiple locations of DialogFillUi.java, there is a possible way to view another user’s images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Score

6.2

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-40133