Beveiligingsadvies

CVE-2023-40075

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-12-04 22:40:50
Laatst bijgewerkt 2024-08-28 17:46:20
Toegewezen door google_android
CVSS-score geen score
Status PUBLISHED

Beschrijving

In forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register unlimited packages due to a missing bounds check. This could lead to local denial of service which results in a boot loop with no additional execution privileges needed. User interaction is not needed for exploitation.