Lucene search

K
vulnrichmentUnisocVULNRICHMENT:CVE-2023-42749
HistoryDec 04, 2023 - 12:54 a.m.

CVE-2023-42749

2023-12-0400:54:24
Unisoc
github.com
1
enginnermode
permission usage
local information disclosure
missing permission check
cve-2023-42749

AI Score

6.4

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In enginnermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

AI Score

6.4

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-42749