CVE-2023-29725

Katalog CVE

CVSS 5.5 · Medium EPSS 0,37%

Kerentanan pada bt21 x bts wallpaper project bt21 x bts wallpaper. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

The BT21 x BTS Wallpaper app 12 for Android allows unauthorized applications to actively request permission to insert data into the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the application is opened. By injecting data, the attacker can force the application to load malicious image URLs and display them in the UI. As the amount of data increases, it will eventually cause the application to trigger an OOM error and crash, resulting in a persistent denial of service attack.

Rincian

Terbit di NVD

2 Juni 2023

Terakhir diubah

9 Juli 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

0,37% peluang dieksploitasi; lebih tinggi dari 28,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29725/CVE%20detail.md exploit · advisory pihak ketiga
• https://apkpure.com/cn/bt21-x-bts-wallpaper-hd-4k/com.bungaakp007.bt21wallpaperoffline130920/download/12-APK product
• https://play.google.com/store/apps/details?id=com.cuiet.blockCalls not applicable