CVE-2024-3108
CVSS 3.1 Score 7.3 of 10 (high)
Details
Summary
CVE-2024-3108 is a new vulnerability affecting Motorola's Time Weather Widget application. This issue involves an implicit intent vulnerability, allowing a local application to gain unauthorized access to a device's location data through the widget. This could potentially put users' privacy at risk, as they may not have explicitly granted permission for the location data to be shared with the third-party application. The exact implications and potential mitigations of this vulnerability are still being evaluated by cybersecurity experts. However, it is recommended that users be cautious and limit the permissions granted to third-party applications, especially those related to location data.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions