CVE-2023-44123
Bluetooth - Theft and (over-)write of arbitrary files with system privilege via PendingIntent hijacking
- State
- Published
- Severity
- 6.1 Medium
- Published
- Sep 27, 2023
- Updated
- Sep 20, 2024
- Reserved
- Sep 26, 2023
Description
The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in the Bluetooth ("com.lge.bluetoothsetting") app. The attacker's app, if it had access to app notifications, could intercept them and redirect them to its activity, before making it grant access permissions to content providers with the `android:grantUriPermissions="true"` flag.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.1 Medium | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L | LGE |
Weaknesses
- CWE-285 Improper Authorization
Affected Products
| Product | Versions |
|---|---|
LG V60 Thin Q 5G(LMV600VM)LG Electronics |
|
References
- https://lgsecurity.lge.com/bulletins/mobile#updateDetailsvendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.