https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 15:46:59 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-187047 EUVD-2026-187047 https://cve.radiocsirt.org/vuln/euvd-2026-187047 https://cve.radiocsirt.org/vuln/fkie_cve-2023-44125 <p>The vulnerability is the use of implicit PendingIntents without the PendingIntent.FLAG_IMMUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in the Personalized service (&#34;com.lge.abba&#34;) app. The attacker&#39;s app, if it had access to app notifications, could intercept them and redirect them to its activity, before making it grant access permissions to content providers with the `android:grantUriPermissions=&#34;true&#34;` flag.</p> <p>The vulnerability is the use of implicit PendingIntents without the PendingIntent.FLAG_IMMUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in the Personalized service (&#34;com.lge.abba&#34;) app. The attacker&#39;s app, if it had access to app notifications, could intercept them and redirect them to its activity, before making it grant access permissions to content providers with the `android:grantUriPermissions=&#34;true&#34;` flag.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-44125 https://cve.radiocsirt.org/vuln/ghsa-c24f-vc3h-hg7p <p>The vulnerability is the use of implicit PendingIntents without the PendingIntent.FLAG_IMMUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in the Personalized service (&#34;com.lge.abba&#34;) app. The attacker&#39;s app, if it had access to app notifications, could intercept them and redirect them to its activity, before making it grant access permissions to content providers with the `android:grantUriPermissions=&#34;true&#34;` flag.</p> <p>The vulnerability is the use of implicit PendingIntents without the PendingIntent.FLAG_IMMUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in the Personalized service (&#34;com.lge.abba&#34;) app. The attacker&#39;s app, if it had access to app notifications, could intercept them and redirect them to its activity, before making it grant access permissions to content providers with the `android:grantUriPermissions=&#34;true&#34;` flag.</p> https://cve.radiocsirt.org/vuln/ghsa-c24f-vc3h-hg7p https://cve.radiocsirt.org/vuln/gsd-2023-44125 gsd-2023-44125 https://cve.radiocsirt.org/vuln/gsd-2023-44125