There is a possible information disclosure due to a missing permission check in Pixel Watch

CVE-2023-4164

Summary

A security vulnerability has been identified in the Android Pixel Watch that allows for potential local information disclosure of sensitive health data due to a missing permission check. This absence of proper enforcement measures means that unauthorized access could occur without the need for additional execution privileges, potentially compromising the privacy of users' health information. It is crucial for users to be aware of this issue and for organizations to implement necessary patches or workarounds to mitigate the risk associated with this vulnerability.

References