[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMWsKezOzhx4ZZ33yxABSJeXqTOZxRqHY3OaOEng-S6c":3,"g5a-risk:CVE-2023-44126":116},{"success":4,"data":5,"meta":113},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":28,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":52,"references":53,"referencesCount":59,"weaknesses":60,"weaknessesCount":59,"isActivelyExploited":69,"cisaInfo":28,"otxData":28,"relatedBlogPosts":70,"seoMetadata":71,"configurations":96,"relatedVendorCves":111,"notableEvents":112},"CVE-2023-44126","What is CVE-2023-44126?","The vulnerability is that the Call management (\"com.android.server.telecom\") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as call states, durations, called numbers, contacts info, etc.","The vulnerability is that the Call management (\"com.android.server.telecom\") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sens...","2023-09-27T15:19:36.647","2023-10-02T15:26:36.08",5.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":28,"CVSSMetricV40":28},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":23,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","LOCAL","LOW","NONE","REQUIRED","UNCHANGED","HIGH","MEDIUM",null,1.8,3.6,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":29,"ImpactScore":37},"product.security@lge.com","Secondary",{"Version":20,"VectorString":35,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":36,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":30,"BaseSeverity":22,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":23,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:N\u002FA:N","CHANGED",1.4,0.00133,[38,38,38,38,38,38,38],"Medium",[42,47],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"google","android","*","cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"lg","v60_thin_q_5g","-","cpe:2.3:h:lg:v60_thin_q_5g:-:*:*:*:*:*:*:*",2,[54],{"url":55,"source":56,"tags":57},"https:\u002F\u002Flgsecurity.lge.com\u002Fbulletins\u002Fmobile#updateDetails","Lge",[58],"Vendor Advisory",1,[61],{"id":62,"name":63,"description":64,"extendedDescription":65,"status":66,"abstraction":67,"structure":68},"CWE-925","Improper Verification of Intent by Broadcast Receiver","The Android application uses a Broadcast Receiver that receives an Intent but does not properly verify that the Intent came from an authorized source.","Certain types of Intents, identified by action string, can only be broadcast by the operating system itself, not by third-party applications. However, when an application registers to receive these implicit system intents, it is also registered to receive any explicit intents. While a malicious application cannot send an implicit system intent, it can send an explicit intent to the target application, which may assume that any received intent is a valid implicit system intent and not an explicit intent from another application. This may lead to unintended behavior.","Incomplete","Variant","Simple",false,[],{"title":72,"metaDescription":73,"keywords":74,"canonicalUrl":75,"structuredData":76},"What is CVE-2023-44126? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-44126, a medium severity cyber security vulnerability from 2023. The vulnerability is that the Call management (\"com.andro...","CVE-2023-44126, CVE-2023-44126 vulnerability, CVE-2023-44126 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, google security, lg security, android vulnerability, v60_thin_q_5g vulnerability","\u002Fwhat-is\u002Fcve-2023-44126",{"@context":77,"@type":78,"headline":72,"description":73,"datePublished":10,"dateModified":11,"author":79,"publisher":83,"about":87,"mainEntityOfPage":91,"articleSection":94,"keywords":95},"https:\u002F\u002Fschema.org","TechArticle",{"@type":80,"name":81,"url":82},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":80,"name":81,"url":82,"logo":84},{"@type":85,"url":86},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":88,"name":6,"description":89,"additionalType":90},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":92,"@id":93},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-44126","Cybersecurity","CVE-2023-44126, CVE-2023-44126 vulnerability, CVE-2023-44126 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[97],{"Operator":98,"Negate":28,"Nodes":99},"AND",[100,107],{"Operator":101,"Negate":28,"CPEMatch":102},"OR",[103],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":104,"VersionStartExcluding":28,"VersionStartIncluding":105,"VersionEndExcluding":28,"VersionEndIncluding":106},"D4E21776-A17F-44D5-AF8F-4BC3806BE6B4","8.0","13.0",{"Operator":101,"Negate":28,"CPEMatch":108},[109],{"Vulnerable":28,"Criteria":51,"MatchCriteriaID":110,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"85B3B7D2-762E-4DD5-90F9-5246907748C4",[],[],{"lastModified":11,"cacheTime":114,"version":115},1792371387273,"2.0",{"score":117,"band":118,"action":119,"scoredAt":120},17,"Info","Track","2026-10-16T06:59:15.389995+00:00"]