PT-2023-25260 · Unknown · Mediaresumelistener.Kt

CVE-2023-35675 · Publicado 2023-09-01 · Atualizado 2023-10-20

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MediaResumeListener.kt (affected versions not specified)

Description The issue is caused by a logic error in the code of MediaResumeListener.kt, specifically in the loadMediaResumptionControls function. This error allows media files played by another user on the same device to be played and listened to, potentially leading to local information disclosure without requiring additional execution privileges. User interaction is not necessary for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

ASB-A-284297711

CVE-2023-35675

Produtos afetados

Mediaresumelistener.Kt

Referências · 9

• https://osv.dev/vulnerability/CVE-2023-35675 · Aviso do Fabricante
• https://android.googlesource.com/platform/frameworks/base/+/c1cf4b9746c9641190730172522324ccd5b8c914 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-35675 · Nota de Segurança
• https://source.android.com/security/bulletin/2023-09-01 · Aviso do Fabricante
• https://t.me/cvenotify/58005 · Publicação no Telegram
• https://twitter.com/Rootcause420/status/1715302573392142504 · Publicação no Twitter
• https://osv.dev/vulnerability/ASB-A-284297711 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1701331705620287531 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1701368677474422786 · Publicação no Twitter