CVE-2023-41826

Description

A PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to access files or interact with non-exported software components without permission.

CVSS v3.1 Score

5.1

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weakness Type (CWE)

CWE-927 CWE-927

References

Other References

https://en-us.support.motorola.com/app/answers/detail/a_id/178703 https://en-us.support.motorola.com/app/answers/detail/a_id/178703

Frequently Asked Questions

What is CVE-2023-41826? +

A PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to access files or interact with non-exported software components without permission. It has a CVSS v3.1 base score of 5.1 (MEDIUM).

How severe is CVE-2023-41826? +

CVE-2023-41826 has a CVSS v3.1 score of 5.1 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

How do I check if I'm vulnerable to CVE-2023-41826? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-48558 7.8

In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to …

CVE-2023-47889 7.8

The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broadcast receivers. These exposed actions can allow …

CVE-2024-3108 5.5

An implicit intent vulnerability was reported for Motorola’s Time Weather Widget application that could allow a local application to acquire …

CVE-2023-41820 5.0

An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read …

CVE-2023-41828 4.4

An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported …

CVE-2023-41817 2.8

An improper export vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read …