Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 04/12/2023 Updated: 02/02/2024

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 0

In forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register unlimited packages due to a missing bounds check. This could lead to local denial of service which results in a boot loop with no additional execution privileges needed. User interaction is not needed for exploitation.

Vulnerable Product	Search on Vulmon	Subscribe to Product
google android 11.0
google android 12.0
google android 12.1
google android 13.0
google android 14.0

NVD-CWE-noinfo https://source.android.com/security/bulletin/2023-12-01 https://android.googlesource.com/platform/frameworks/base/+/ae768fbb9975fdab267f525831cb52f485ab0ecc https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-40075

Vulnerability Summary

References

Vulmon Search

About

Products

Connect