https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 18:58:24 +0000 https://cve.radiocsirt.org/vuln/cve-2023-44129 <p><strong>Affected:</strong> LG Electronics LG V60 Thin Q 5G(LMV600VM)</p> <p>The vulnerability is that the Messaging (&#34;com.android.mms&#34;) app patched by LG forwards attacker-controlled intents back to the attacker in the exported &#34;com.android.mms.ui.QClipIntentReceiverActivity&#34; activity. The attacker can abuse this functionality by launching this activity and then sending a broadcast with the &#34;com.lge.message.action.QCLIP&#34; action. The attacker can send, e.g., their own data/clipdata and set Intent.FLAG_GRANT_* flags. After the attacker received that intent in the &#34;onActivityResult()&#34; method, they would have access to arbitrary content providers that have the `android:grantUriPermissions=&#34;true&#34;` flag set.</p> <p><strong>Affected:</strong> LG Electronics LG V60 Thin Q 5G(LMV600VM)</p> <p>The vulnerability is that the Messaging (&#34;com.android.mms&#34;) app patched by LG forwards attacker-controlled intents back to the attacker in the exported &#34;com.android.mms.ui.QClipIntentReceiverActivity&#34; activity. The attacker can abuse this functionality by launching this activity and then sending a broadcast with the &#34;com.lge.message.action.QCLIP&#34; action. The attacker can send, e.g., their own data/clipdata and set Intent.FLAG_GRANT_* flags. After the attacker received that intent in the &#34;onActivityResult()&#34; method, they would have access to arbitrary content providers that have the `android:grantUriPermissions=&#34;true&#34;` flag set.</p> https://cve.radiocsirt.org/vuln/cve-2023-44129