CVE-2023-29738

Sažetak

An issue found in Wave Animated Keyboard Emoji v.1.70.7 for Android allows a local attacker to cause code execution and escalation of Privileges via the database files.

Reference

http://www.wavekeyboard.com/
https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29738/CVE%20detail.md
https://play.google.com/store/apps/details?id=com.amdroidalarmclock.amdroid
https://play.google.com/store/apps/details?id=com.wave.keyboard
http://www.wavekeyboard.com/
https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29738/CVE%20detail.md
https://play.google.com/store/apps/details?id=com.amdroidalarmclock.amdroid
https://play.google.com/store/apps/details?id=com.wave.keyboard

CVSS

Base:	7.8
Impact:	5.9
Exploitability:	1.8

Pristup

Vektor	Složenost	Autentikacija
LOCAL	LOW	LOW

Impact

Povjerljivost	Cjelovitost	Dostupnost
HIGH	HIGH	HIGH

CVSS vektor

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Zadnje važnije ažuriranje

14-01-2025 - 17:15

Objavljeno

30-05-2023 - 23:15