CVE-2018-14983

https://notcve.org/view.php?id=CVE-2018-14983

25 Apr 2019 — The Sony Xperia L1 Android device with a build fingerprint of Sony/G3313/G3313:7.0/43.0.A.6.49/2867558199:user/release-keys contains the android framework (i.e., system_server) with a package name of android (versionCode=24, versionName=7.0) that has been modified by Sony or another entity in the supply chain. The system_server process in the core android package has an exported broadcast receiver that allows any app co-located on the device to programmatically initiate the taking of a screenshot and have t... • https://www.kryptowire.com • CWE-20: Improper Input Validation •