Critical severity · published Jun 1, 2023
CVE-2023-29722
The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized apps to actively request permission to modify data in the database that records information about a…
9.1
CVSS
0.8%
EPSS
No
On KEV
Description
The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized apps to actively request permission to modify data in the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the app is opened. An attacker could tamper with this data to cause an escalation of privilege attack.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GU
Glitter Unicorn Wallpaper · Glitter Unicorn Wallpaper Project
7.0 through 8.0 · source: NVD
Affected product
GU
Glitter Unicorn Wallpaper
Glitter Unicorn Wallpaper Project
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-29722
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-29722
Exploit
https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29722/CVE%20detail.md
More from Glitter Unicorn Wallpaper
7.5
CVE-2023-29723
The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized applications to actively request permission to insert data into the database that records…