CVE-2023-29751

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Jun 9, 2023
Updated: Jan 6, 2025
CWE ID 346

Summary

CVE-2023-29751 is a vulnerability affecting Yandex Navigator version 6.60 for Android. This issue enables unauthorized apps to interfere with the application by manipulating its SharedPreference files. The consequence is a persistent denial of service, preventing legitimate use of Yandex Navigator until the affected files are restored. Attackers can exploit this vulnerability to disrupt users' navigation experience, potentially causing significant inconvenience. Users are advised to update the Yandex Navigator app as soon as a patch becomes available to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share