CVE-2024-20853

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-20853
Improper verification of intent by broadcast receiver vulnerability in ThemeStore prior to 5.3.05.2 allows local attackers to write arbitrary files to sandbox of ThemeStore.

5.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 2.5

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=04
https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=04
Configurations

No configuration.

History

12 Mar 2025, 17:15

Type Values Removed Values Added
CWE CWE-925

21 Nov 2024, 08:53

Type Values Removed Values Added
References () https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=04 - () https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=04 -

02 Apr 2024, 12:50

Type Values Removed Values Added
Summary
  • (es) La verificación inadecuada de la intención mediante la vulnerabilidad del receptor de transmisión en ThemeStore anterior a 5.3.05.2 permite a atacantes locales escribir archivos arbitrarios en la sandbox de ThemeStore.

02 Apr 2024, 03:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-02 03:15

Updated : 2025-03-12 17:15

NVD link : CVE-2024-20853

Mitre link : CVE-2024-20853

CVE.ORG link : CVE-2024-20853

JSON object : View

Products Affected

No product.

CWE
CWE-925

Improper Verification of Intent by Broadcast Receiver