cbcvebase.
CVE-2023-40127
published 2023-10-27

CVE-2023-40127: In multiple locations, there is a possible way to access screenshots due to a confused deputy. This could lead to local information disclosure with no…

low3.3CVSS 3.1
AVLACLPRLUINSUCLINAN
In multiple locations, there is a possible way to access screenshots due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected

13 ranges
VendorProductVersion rangeFixed in
googleandroid
googleandroid
googleandroid
googleandroid
googleandroid
googleandroid
googleandroid
googleandroid
googleandroid
platformpackages_providers_mediaprovider>= 11:0 < 11:2023-10-0111:2023-10-01
platformpackages_providers_mediaprovider>= 12:0 < 12:2023-10-0112:2023-10-01
platformpackages_providers_mediaprovider>= 12L:0 < 12L:2023-10-0112L:2023-10-01
platformpackages_providers_mediaprovider>= 14-next:0 < 14-next:2023-10-0114-next:2023-10-01