Skip to main content

Improper Export of Android Application Components

CVE-2023-41827

Medium
5.1/10

Summary

An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to inject an HTML-based message on screen UI.

  • LOW
  • LOCAL
  • LOW
  • UNCHANGED
  • NONE
  • NONE
  • LOW
  • NONE

CWE-926 - Improper Export of Android Application Components

The Android application exports a component for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains.

References

Advisory Timeline

  • Published