CVE Catalog

CVE-2023-29724

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.37%

29th percentile - higher than 29% of all known CVEs

Summary

The BT21 x BTS Wallpaper app 12 for Android allows unauthorized apps to request permission to modify the database storing user preferences, which is loaded into memory when the app is opened. An attacker can tamper with this data to cause an escalation of privilege attack.

Risk Assessment

The risk is that an attacker could gain control over the app or access sensitive user data, leading to privacy breaches and security compromises.

Recommendation

Immediately uninstall the BT21 x BTS Wallpaper 12 app and replace it with a more secure alternative. Also, keep Android and apps updated regularly.

Other vulnerabilities in BT21 x BTS Wallpaper

Original NVD description (English source)

The BT21 x BTS Wallpaper app 12 for Android allows unauthorized apps to actively request permission to modify data in the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the app is opened. An attacker could tamper with this data to cause an escalation of privilege attack.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS