CVE-2023-40074

Опубликовано: 04 дек. 2023

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Ссылки

https://android.googlesource.com/platform/frameworks/base/+/40e4ea759743737958dde018f3606d778f7a53f3
Mailing List
Patch
https://source.android.com/security/bulletin/2023-12-01
Patch
Vendor Advisory
https://android.googlesource.com/platform/frameworks/base/+/40e4ea759743737958dde018f3606d778f7a53f3
Mailing List
Patch
https://source.android.com/security/bulletin/2023-12-01
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*

cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*

cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*

cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*

EPSS

Процентиль: 26%

0.00089

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2023-40074

CVSS3: 5.5

ubuntu

около 2 лет назад

In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

GHSA-c3p6-929c-xr84

CVSS3: 5.5

github

около 2 лет назад

In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 26%

0.00089

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo