CWE-925: Intent Spoofing
The Android application uses a Broadcast Receiver that receives an Intent but does not properly verify that the Intent came from an authorized source.
Also known as Improper Verification of Intent by Broadcast Receiver.
A kind of CWE-940 Improper Verification of Source of a Communication Channel.
From the CWE List. © The MITRE Corporation.
Newest
- samsung mobile cloud assistant Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version... 5.1 Medium
- rubyonrails rails, rails activestorage +1 more Rails Active Storage has possible content type bypass via metadata in direct uploads 5.3 Medium
- infinix mobile com.transsion.agingfunction, com.transmission.agingfunction +1 more Unauthorized factory reset of Infinix devices 9.4 Critical
- samsung mobile themestore, samsung galaxy themes +1 more Improper verification of intent by broadcast receiver vulnerability in ThemeStore prior to 5.3.05... 5.1 Medium
- google android, lg electronics v60 thin q 5g(lmv600vm) +1 more Call management - Implicit intents disclose telephony data such as phone numbers, call states, contacts 3.6 Low