Information Disclosure in APP Launch Information on Qualcomm Products
CVE-2024-38425
6.1MEDIUM
Summary
A vulnerability exists in Qualcomm mobile platforms that may allow for the unintentional disclosure of information through the use of implicit broadcasts. Such broadcasts include APP launch information, which could be exploited to gain sensitive data. It is crucial for organizations leveraging Qualcomm technologies to implement appropriate security measures to safeguard against potential data exposure from affected devices.
References
CVSS V3.1
Score:
6.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published