Advisories · Weakness
CWE-927.
Every Advisory and CVE whose sources give the weakness CWE-927, newest first.
- CVSS 7.8 High
In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit intent hijacking.
- Google Android
- CWE-927
- CVSS 2.8 Low
An Implicit intent vulnerability was reported in the Motorola framework that could allow an attacker to read telephony-related data.
- Motorola Phones
- CWE-927
- CVSS 5.5 Medium
An implicit intent vulnerability was reported for Motorola’s Time Weather Widget application that could allow a local application to acquire the location of the device without authorization.
- Motorola Phones
- CWE-927
- CVSS 4.4 Medium
An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported content provider.
- Motorola Phones
- CWE-927
- CVSS 5.1 Medium
A PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to access files or interact with non-exported software components without permissi…
- Motorola Phones
- CWE-927
- CVSS 2.8 Low
An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling phone number and calling data.
- Motorola Phones
- CWE-927
- CVSS 5.0 Medium
An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information about connected Bluetooth audio devices.
- Motorola Phones
- CWE-927
- CVSS 2.8 Low
An improper export vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read unauthorized information.
- Motorola Phones
- CWE-927
- CVSS 7.8 High
The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broadcast receivers.
- CWE-927
- CVSS 3.6 Low
Call management - Implicit activity intents disclose contact details and phone numbers
- LG Electronics LG V60 Thin Q 5G(LMV600VM)
- CWE-927
- CVSS 6.1 Medium
Screen recording - Theft of arbitrary files with system privilege
- LG Electronics LG V60 Thin Q 5G(LMV600VM)
- CWE-927
- CVSS 6.1 Medium
LockScreenSettings - Theft arbitrary files with system privilege
- LG Electronics LG V60 Thin Q 5G(LMV600VM)
- CWE-927
- CVSS 4.2 Medium
NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implicit intent meant for the streamer compone…
- NVIDIA GeForce NOW for Android mobile and TV app
- CWE-927
- CVSS 5.0 Medium
CodenameOne Pending Intent vulnerability
- Information disclosure
- CWE-927
<7.0.71 · fixed in 7.0.71
GHSA-p6xq-9h8r-v544 · CVE-2022-4903 - CVSS 6.2 Medium
Samsung Mobile Charm by Samsung: PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to…
- Samsung Mobile Charm by Samsung
- CWE-927
- CVSS 6.2 Medium
Samsung Mobile Charm by Samsung: PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to…
- Samsung Mobile Charm by Samsung
- CWE-927
- CVSS 6.2 Medium
Samsung Mobile Charm by Samsung: Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to…
- Samsung Mobile Charm by Samsung
- CWE-927
- CVSS 6.2 Medium
Samsung Mobile Charm by Samsung: Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to…
- Samsung Mobile Charm by Samsung
- CWE-927