Lucene search
Google_androidVULNRICHMENT:CVE-2023-40138HistoryOct 27, 2023 - 8:22 p.m.
CVE-2023-40138
2023-10-2720:22:59
google_android
github.com
1
fillui
image view
local information disclosure
user interaction
In FillUi of FillUi.java, there is a possible way to view another user’s images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Related
prion
prion
Information disclosure
2023-10-27 21:15:00
nvd
nvd
CVE-2023-40138
2023-10-27 21:15:09
osv
osv
cve
cve
CVE-2023-40138
2023-10-27 21:15:09
cvelist
cvelist
CVE-2023-40138
2023-10-27 20:22:59
AI Score
6.2
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2023-40138