CVE-2023-29724

HighCVSS 7.8/10Last modified Jul 9, 2026

Description

The BT21 x BTS Wallpaper app 12 for Android allows unauthorized apps to actively request permission to modify data in the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the app is opened. An attacker could tamper with this data to cause an escalation of privilege attack.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Jun 2, 2023
Last modified: Jul 9, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-297255.5The BT21 x BTS Wallpaper app 12 for Android allows unauthorized applications to actively request permission to insert data into the database CVE-2023-297267.5The Call Blocker application 6.6.3 for Android incorrectly opens a key component that an attacker can use to inject large amounts of dirty d CVE-2023-297279.8The Call Blocker application 6.6.3 for Android allows unauthorized applications to use exposed components to delete data stored in its datab CVE-2023-297289.8The Call Blocker application 6.6.3 for Android allows attackers to tamper with feature-related data, resulting in a severe elevation of priv CVE-2023-29736.1A vulnerability, which was classified as problematic, has been found in SourceCodester Students Online Internship Timesheet Syste 1.0. Affec CVE-2023-297317.5SoLive 1.6.14 thru 1.6.20 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can l CVE-2023-297329.8SoLive 1.6.14 thru 1.6.20 for Android exists exposed component, the component provides the method to modify the SharedPreference file. The a CVE-2023-297337.8The Lock Master app 2.2.4 for Android allows unauthorized apps to modify the values in its SharedPreference files. These files hold data tha CVE-2023-297349.8An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the dat CVE-2023-297355.5An issue found in edjing Mix v.7.09.01 for Android allows a local attacker to cause a denial of service via the database files.CVE-2023-297369.8Keyboard Themes 1.275.1.164 for Android contains a dictionary traversal vulnerability that allows unauthorized apps to overwrite arbitrary f CVE-2023-297375.5An issue found in Wave Animated Keyboard Emoji v.1.70.7 for Android allows a local attacker to cause a denial of service via the database fi