https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 05:35:22 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-187051 EUVD-2026-187051 https://cve.radiocsirt.org/vuln/euvd-2026-187051 https://cve.radiocsirt.org/vuln/fkie_cve-2023-44122 <p>The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings (&#34;com.lge.lockscreensettings&#34;) app in the &#34;com/lge/lockscreensettings/dynamicwallpaper/MyCategoryGuideActivity.java&#34; file. The main problem is that the app launches implicit intents that can be intercepted by third-party apps installed on the same device. They also can return arbitrary data that will be passed to the &#34;onActivityResult()&#34; method. The LockScreenSettings app copies the received file to the &#34;/data/shared/dw/mycategory/wallpaper_01.png&#34; path and then changes the file access mode to world-readable and world-writable.</p> <p>The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings (&#34;com.lge.lockscreensettings&#34;) app in the &#34;com/lge/lockscreensettings/dynamicwallpaper/MyCategoryGuideActivity.java&#34; file. The main problem is that the app launches implicit intents that can be intercepted by third-party apps installed on the same device. They also can return arbitrary data that will be passed to the &#34;onActivityResult()&#34; method. The LockScreenSettings app copies the received file to the &#34;/data/shared/dw/mycategory/wallpaper_01.png&#34; path and then changes the file access mode to world-readable and world-writable.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-44122 https://cve.radiocsirt.org/vuln/ghsa-gq65-23cc-h5wp <p>The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings (&#34;com.lge.lockscreensettings&#34;) app in the &#34;com/lge/lockscreensettings/dynamicwallpaper/MyCategoryGuideActivity.java&#34; file. The main problem is that the app launches implicit intents that can be intercepted by third-party apps installed on the same device. They also can return arbitrary data that will be passed to the &#34;onActivityResult()&#34; method. The LockScreenSettings app copies the received file to the &#34;/data/shared/dw/mycategory/wallpaper_01.png&#34; path and then changes the file access mode to world-readable and world-writable.</p> <p>The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings (&#34;com.lge.lockscreensettings&#34;) app in the &#34;com/lge/lockscreensettings/dynamicwallpaper/MyCategoryGuideActivity.java&#34; file. The main problem is that the app launches implicit intents that can be intercepted by third-party apps installed on the same device. They also can return arbitrary data that will be passed to the &#34;onActivityResult()&#34; method. The LockScreenSettings app copies the received file to the &#34;/data/shared/dw/mycategory/wallpaper_01.png&#34; path and then changes the file access mode to world-readable and world-writable.</p> https://cve.radiocsirt.org/vuln/ghsa-gq65-23cc-h5wp https://cve.radiocsirt.org/vuln/gsd-2023-44122 gsd-2023-44122 https://cve.radiocsirt.org/vuln/gsd-2023-44122