CVE-2023-40127

In multiple locations, there is a possible way to access screenshots due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

• https://android.googlesource.com/platform/packages/providers/MediaProvider/+/747431250612507e8289ae8eb1a56303e79ab678Patch
• https://source.android.com/security/bulletin/2023-10-01Patch, Vendor Advisory
• https://android.googlesource.com/platform/packages/providers/MediaProvider/+/747431250612507e8289ae8eb1a56303e79ab678Patch
• https://source.android.com/security/bulletin/2023-10-01Patch, Vendor Advisory

Published

Oct 27, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-40120In multiple locations, there is a possible way to bypass use…7.8
• CVE-2023-40121In appendEscapedSQLString of DatabaseUtils.java, there is a …5.5
• CVE-2023-40122In applyCustomDescription of SaveUi.java, there is a possibl…3.3
• CVE-2023-40123In updateActionViews of PipMenuView.java, there is a possibl…5.5
• CVE-2023-40124In multiple locations, there is a possible cross-user read d…5.5
• CVE-2023-40125In onCreate of ApnEditor.java, there is a possible way for a…7.8
• CVE-2023-40128In several functions of xmlregexp.c, there is a possible out…7.8
• CVE-2023-40129In build_read_multi_rsp of gatt_sr.cc, there is a possible o…8.8
• CVE-2023-4013The GDPR Cookie Compliance (CCPA, DSGVO, Cookie Consent) Wor…6.5
• CVE-2023-40130In notifyTimeout of CallRedirectionProcessor, there is a pos…7.8
• CVE-2023-40131In GpuService of GpuService.cpp, there is a possible use aft…7
• CVE-2023-40132In setActualDefaultRingtoneUri of RingtoneManager.java, ther…7.8