CVE-2023-35675 — Sensitive Information Exposure in Frameworks Base
4 documents4 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 95.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 11
Description
In loadMediaResumptionControls of MediaResumeListener.kt, there is a possible way to play and listen to media files played by another user on the same device due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6
Affected Packages4 packages
🔴Vulnerability Details
2📋Vendor Advisories
1Android▶
CVE-2023-35675: Android Security Bulletin 2023-09-01
CVE: CVE-2023-35675
Severity: HIGH
Type: ID
Affected AOSP versions: 11, 12, 12L, 13
References: A-284297711↗2023-09-01