What is CVE-2023-44129?

CVE-2023-44129 is a low-severity vulnerability in Google Android, classified under CWE-926. CVSS score: 3.6/10. Published 2023-09-27.

How severe is CVE-2023-44129?

Low severity. CVSS v3 base score is 3.6 out of 10.

Vulnerability in Google Android

CVE-2023-44129

The vulnerability is that the Messaging ("com.android.mms") app patched by LG forwards attacker-controlled intents back to the attacker in the exported "com.android.mms.ui.QClipIntentReceiverActivity" activity. The attacker can abuse this…

EPSS: 0.001 (0.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.6 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N.

Affected products

Google Android
Lg V60_thin_q_5g
Lg Electronics V60 Thin Q 5g(lmv600vm) — versions Android 12

Weakness classification (CWE)

CWE-926

References

product.security@lge.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2023-44129?: CVE-2023-44129 is a low-severity vulnerability in Google Android, classified under CWE-926. CVSS score: 3.6/10. Published 2023-09-27.
How severe is CVE-2023-44129?: Low severity. CVSS v3 base score is 3.6 out of 10.