CVE-2023-35683

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Sep 11, 2023

Updated: Sep 14, 2023

CWE ID 89

Summary

CVE-2023-35683 is a vulnerability affecting DatabaseUtils.java in bindSelection. An attacker can exploit this SQL injection issue to access files from other applications without requiring additional execution privileges or user interaction. The vulnerability lies in this function, and it could potentially lead to local information disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Android

Affected Vendors

Google

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/skmcNP
https://www.cve.org/CVERecord?id=CVE-2023-35683
https://nvd.nist.gov/vuln/detail/CVE-2023-35683

Back to Vulnerability Database