[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhQf3wbX6Bk8Ig5jbFkQhVr4-rojuXzffyx6rWzrsXXI":3,"g5a-risk:CVE-2023-44129":114},{"success":4,"data":5,"meta":111},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":26,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":50,"references":51,"referencesCount":57,"weaknesses":58,"weaknessesCount":57,"isActivelyExploited":67,"cisaInfo":26,"otxData":26,"relatedBlogPosts":68,"seoMetadata":69,"configurations":94,"relatedVendorCves":109,"notableEvents":110},"CVE-2023-44129","What is CVE-2023-44129?","The vulnerability is that the Messaging (\"com.android.mms\") app patched by LG forwards attacker-controlled intents back to the attacker in the exported \"com.android.mms.ui.QClipIntentReceiverActivity\" activity. The attacker can abuse this functionality by launching this activity and then sending a broadcast with the \"com.lge.message.action.QCLIP\" action. The attacker can send, e.g., their own data\u002Fclipdata and set Intent.FLAG_GRANT_* flags. After the attacker received that intent in the \"onActivityResult()\" method, they would have access to arbitrary content providers that have the `android:grantUriPermissions=\"true\"` flag set.","The vulnerability is that the Messaging (\"com.android.mms\") app patched by LG forwards attacker-controlled intents back to the attacker in the exported \"com....","2023-09-27T15:19:37.35","2023-10-02T18:59:15.66",3.3,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","REQUIRED","UNCHANGED",null,1.8,1.4,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"product.security@lge.com","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":34,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":22,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:N\u002FA:N","CHANGED",3.6,0.001,[36,36,36,36,36,36,36],"Low",[40,45],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"google","android","*","cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"lg","v60_thin_q_5g","-","cpe:2.3:h:lg:v60_thin_q_5g:-:*:*:*:*:*:*:*",2,[52],{"url":53,"source":54,"tags":55},"https:\u002F\u002Flgsecurity.lge.com\u002Fbulletins\u002Fmobile#updateDetails","Lge",[56],"Vendor Advisory",1,[59],{"id":60,"name":61,"description":62,"extendedDescription":63,"status":64,"abstraction":65,"structure":66},"CWE-926","Improper Export of Android Application Components","The Android application exports a component for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains.","The attacks and consequences of improperly exporting a component may depend on the exported component:","Incomplete","Variant","Simple",false,[],{"title":70,"metaDescription":71,"keywords":72,"canonicalUrl":73,"structuredData":74},"What is CVE-2023-44129? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-44129, a low severity cyber security vulnerability from 2023. The vulnerability is that the Messaging (\"com.android.mms\") ...","CVE-2023-44129, CVE-2023-44129 vulnerability, CVE-2023-44129 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, google security, lg security, android vulnerability, v60_thin_q_5g vulnerability","\u002Fwhat-is\u002Fcve-2023-44129",{"@context":75,"@type":76,"headline":70,"description":71,"datePublished":10,"dateModified":11,"author":77,"publisher":81,"about":85,"mainEntityOfPage":89,"articleSection":92,"keywords":93},"https:\u002F\u002Fschema.org","TechArticle",{"@type":78,"name":79,"url":80},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":78,"name":79,"url":80,"logo":82},{"@type":83,"url":84},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":86,"name":6,"description":87,"additionalType":88},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":90,"@id":91},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-44129","Cybersecurity","CVE-2023-44129, CVE-2023-44129 vulnerability, CVE-2023-44129 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[95],{"Operator":96,"Negate":26,"Nodes":97},"AND",[98,105],{"Operator":99,"Negate":26,"CPEMatch":100},"OR",[101],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":102,"VersionStartExcluding":26,"VersionStartIncluding":103,"VersionEndExcluding":26,"VersionEndIncluding":104},"F5E2EE3E-FD6F-4D27-871A-EE468B136DA0","12.0","13.0",{"Operator":99,"Negate":26,"CPEMatch":106},[107],{"Vulnerable":26,"Criteria":49,"MatchCriteriaID":108,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"85B3B7D2-762E-4DD5-90F9-5246907748C4",[],[],{"lastModified":11,"cacheTime":112,"version":113},1792371345283,"2.0",{"score":115,"band":116,"action":117,"scoredAt":118},12,"Info","Track","2026-10-16T06:59:15.391122+00:00"]