CVE-2023-44122 LockScreenSettings - Theft arbitrary files with system privilege
Attackers can steal arbitrary files with system privileges by intercepting implicit intents in the LG LockScreenSettings app.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2023-44122?
CVE-2023-44122 is a medium-severity path traversal vulnerability in Google Android, published on 27 Sep 2023. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings ("com.lge.lockscreensettings") app in the "com/lge/lockscreensettings/dynamicwallpaper/MyCategoryGuideActivity.java" file. The main problem is that the app launches implicit intents that can be intercepted by third-party apps installed on the same device. They also can return arbitrary data that will be passed to the "onActivityResult()" method. The LockScreenSettings app copies the received file to the "/data/shared/dw/mycategory/wallpaper_01.png" path and then changes the file access mode to world-readable and world-writable.
Which versions are affected by CVE-2023-44122?
It affects 1 product.
Products include Google Android.
How do I fix CVE-2023-44122?
No fix has been published for CVE-2023-44122 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2023-44122 being exploited?
There is no known exploitation of CVE-2023-44122 in the wild and no public exploit code.
Other vulnerabilities in Google Android
Sources
Also known as GHSA-gq65-23cc-h5wp.