CVE-2023-40109

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Feb 15, 2024
Updated: Dec 16, 2024
CWE ID 266

Summary

CVE-2023-40109 is a vulnerability affecting the createFromParcel function in UsbConfiguration.java. It permits the bypassing of permissions, potentially enabling a local attacker to launch background activities. This can result in privilege escalation without requiring any additional execution privileges. User interaction is required for an attacker to successfully exploit this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share