CVE-2023-44124
Screen recording - Theft of arbitrary files with system privilege
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
The vulnerability is to theft of arbitrary files with system privilege in the Screen recording ("com.lge.gametools.gamerecorder") app in the "com/lge/gametools/gamerecorder/settings/ProfilePreferenceFragment.java" file. The main problem is that the app launches implicit intents that can be intercepted by third-party apps installed on the same device. They also can return arbitrary data that will be passed to the "onActivityResult()" method. The Screen recording app saves contents of arbitrary URIs to SD card which is a world-readable storage.
La vulnerabilidad es el robo de archivos arbitrarios con privilegios del sistema en la aplicación de grabación de pantalla ("com.lge.gametools.gamerecorder") en el archivo "com/lge/gametools/gamerecorder/settings/ProfilePreferenceFragment.java". El principal problema es que la aplicación lanza intenciones implícitas que pueden ser interceptados por aplicaciones de terceros instaladas en el mismo dispositivo. También pueden devolver datos arbitrarios que se pasarán al método "onActivityResult()". La aplicación de grabación de pantalla guarda el contenido de URI arbitrarios en la tarjeta SD, que es un almacenamiento legible en todo el mundo.
CVSS Scores
SSVC
- Decision:Track
Timeline
- 2023-09-26 CVE Reserved
- 2023-09-27 CVE Published
- 2023-10-03 EPSS Updated
- 2024-09-20 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-668: Exposure of Resource to Wrong Sphere
- CWE-927: Use of Implicit Intent for Sensitive Communication
CAPEC
- CAPEC-122: Privilege Abuse
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://lgsecurity.lge.com/bulletins/mobile#updateDetails | 2023-10-02 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 12.0 Search vendor "Google" for product "Android" and version "12.0" | - |
Affected
| in | Lg Search vendor "Lg" | V60 Thin Q 5g Search vendor "Lg" for product "V60 Thin Q 5g" | - | - |
Safe
|
Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 13.0 Search vendor "Google" for product "Android" and version "13.0" | - |
Affected
| in | Lg Search vendor "Lg" | V60 Thin Q 5g Search vendor "Lg" for product "V60 Thin Q 5g" | - | - |
Safe
|