CVE-2023-39403

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-358 CWE-285

Affected software

No affected versions have been published.

Timeline

Published: Aug 13, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-394047.5Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability CVE-2023-394059.8Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may cause other apps CVE-2023-394067.5Permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart.CVE-2023-394079.1The Watchkit has a risk of unauthorized file access.Successful exploitation of this vulnerability may affect confidentiality and integrity.CVE-2023-394087.5DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.CVE-2023-394097.5DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.CVE-2023-394110.0Relative Path Traversal vulnerability in ZkTeco-based OEM devices allows an attacker to write any file on the system with root privileges.CVE-2023-394107.5When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead t CVE-2023-394114.4Improper input validationation for some Intel Unison software may allow a privileged user to potentially enable denial of service via local CVE-2023-394128.8Cross-site request forgery in some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via n CVE-2023-394137.8Multiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation functionality of GTKWave 3.3.115. A speciall CVE-2023-394147.3Multiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation functionality of GTKWave 3.3.115. A speciall