CVE-2023-40098

In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic error in the code

published December 4, 2023

CVSS
—
EPSS
0%
Percentile
1.8
In the wild
Unconfirmed
What it is

In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00121 · 1.8th percentile
Published
2023-12-04T22:40Z
EPSS history
Timeline
  • 04 DEC 22:40Z
    In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic error in the code
    cvelistv5