CVE-2023-29722

The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized apps to actively request permission to modify data in the database that records…

Critical · published June 1, 2023

CVSS v3.1
9.1
EPSS
1%
Percentile
55.6
In the wild
Unconfirmed
What it is

🚨 The Glitter Unicorn Wallpaper app has a serious flaw that lets unauthorized apps request permission to mess with user data! 🔥 Think of it like a hotel where anyone can ask for a master key to your room and snoop through your belongings — that's basically what this vulnerability allows! It’s alarmingly easy for attackers to tamper with sensitive user preferences stored in the app’s database. An attacker could easily manipulate your personal preferences, leading to unauthorized access and an escalation of privileges. This could mean anything from changing your wallpaper to reading your private messages, giving them way more power than they should have over your device!

Put simply

Think of it like a hotel where anyone can ask for a master key to your room and snoop through your belongings — that's basically what this vulnerability allows! It’s alarmingly easy for attackers to tamper with sensitive user preferences stored in the app’s database. This vulnerability arises from the Glitter Unicorn Wallpaper app's failure to enforce proper permissions, allowing unauthorized apps to request access to modify sensitive user data stored in a database.

What to do

An attacker could easily manipulate your personal preferences, leading to unauthorized access and an escalation of privileges. This could mean anything from changing your wallpaper to reading your private messages, giving them way more power than they should have over your device! Immediate action is crucial! Update the Glitter Unicorn Wallpaper app to the latest version as soon as it becomes available, and consider reviewing app permissions to ensure no unauthorized apps have access. Stay vigilant! You've got this! Stay proactive, and you’ll keep your device secure! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00784 · 55.6th percentile
Published
2023-06-01T00:00Z
EPSS history
Timeline
  • 01 JUN 00:00Z
    The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized apps to actively request permission to modify data in the database that records…
    cvelistv5