Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Car Settings app, the NotificationAccessConfirmationActivity is exported. In NotificationAccessConfirmationActivity, it gets both 'mComponentName' and 'pkgTitle' from user.An unprivileged app can use a malicous mComponentName with a benign pkgTitle (e.g. Settings app) to make users enable notification access permission for the malicious app. That is, users believe they enable the notification access permission for the Settings app, but actually they enable the notification access permission for the malicious app.Once the malicious app gets the notification access permission, it can read all notifications, including users' personal information.Product: AndroidVersions: Android-12LAndroid ID: A-225189301
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Google Android 信息泄露漏洞
Vulnerability Description
Google Android是美国谷歌（Google）公司的一套以Linux为基础的开源操作系统。 Google Android 存在信息泄露漏洞，该漏洞源于数据输出过多。攻击者利用该漏洞获取敏感数据。
CVSS Information
N/A
Vulnerability Type
N/A