CVE-2023-40109
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Feb 15, 2024
Updated: Dec 16, 2024
CWE ID 266
Summary
CVE-2023-40109 is a vulnerability affecting the createFromParcel function in UsbConfiguration.java. It permits the bypassing of permissions, potentially enabling a local attacker to launch background activities. This can result in privilege escalation without requiring any additional execution privileges. User interaction is required for an attacker to successfully exploit this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Android