https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 15:25:27 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-187050 EUVD-2026-187050 https://cve.radiocsirt.org/vuln/euvd-2026-187050 https://cve.radiocsirt.org/vuln/fkie_cve-2023-44123 <p>The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in the Bluetooth (&#34;com.lge.bluetoothsetting&#34;) app. The attacker&#39;s app, if it had access to app notifications, could intercept them and redirect them to its activity, before making it grant access permissions to content providers with the `android:grantUriPermissions=&#34;true&#34;` flag.</p> <p>The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in the Bluetooth (&#34;com.lge.bluetoothsetting&#34;) app. The attacker&#39;s app, if it had access to app notifications, could intercept them and redirect them to its activity, before making it grant access permissions to content providers with the `android:grantUriPermissions=&#34;true&#34;` flag.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-44123 https://cve.radiocsirt.org/vuln/ghsa-mhw4-q8mw-j7h5 <p>The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in the Bluetooth (&#34;com.lge.bluetoothsetting&#34;) app. The attacker&#39;s app, if it had access to app notifications, could intercept them and redirect them to its activity, before making it grant access permissions to content providers with the `android:grantUriPermissions=&#34;true&#34;` flag.</p> <p>The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in the Bluetooth (&#34;com.lge.bluetoothsetting&#34;) app. The attacker&#39;s app, if it had access to app notifications, could intercept them and redirect them to its activity, before making it grant access permissions to content providers with the `android:grantUriPermissions=&#34;true&#34;` flag.</p> https://cve.radiocsirt.org/vuln/ghsa-mhw4-q8mw-j7h5 https://cve.radiocsirt.org/vuln/gsd-2023-44123 gsd-2023-44123 https://cve.radiocsirt.org/vuln/gsd-2023-44123