CWE-927: Use of Implicit Intent for Sensitive Communication
Filter
The Android application uses an implicit intent for transmitting sensitive data to other applications.
What the weakness is: CWE-927 at MITRE. All weaknesses
Ask an AI about CWE-927
Show the prompt
Explain CWE-927: Use of Implicit Intent for Sensitive Communication and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/927.html and https://cve.bz/cve/cwe/927?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.8CVE-2025-48558EPSS 0.08%
In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit intent hijacking. This could lead to local escalation of privilege with no additional execution privile…
- 2.8CVE-2024-3480EPSS 0.1%
An Implicit intent vulnerability was reported in the Motorola framework that could allow an attacker to read telephony-related data.
- 5.5CVE-2024-3108EPSS 0.2%
An implicit intent vulnerability was reported for Motorola’s Time Weather Widget application that could allow a local application to acquire the location of the device without authorization.
- 4.4CVE-2023-41828EPSS 0.2%
An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported content provider.
- 5.1CVE-2023-41826EPSS 0.2%
A PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to access files or interact with non-exported software components without permission.
- 2.8CVE-2023-41824EPSS 0.1%
An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling phone number and calling data.
- 5.0CVE-2023-41820EPSS 0.1%
An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information about connected Bluetooth audio devices.
- 2.8CVE-2023-41817EPSS 0.1%
An improper export vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read unauthorized information.
- 7.8CVE-2023-47889EPSS 0.3%
The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broadcast receivers. These exposed actions can allow any app on the device to send unauthorized broadcasts, leading to unin…
- 5.5CVE-2023-44127EPSS 0.1%
he vulnerability is that the Call management ("com.android.server.telecom") app patched by LG launches implicit intents that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as c…
- 3.3CVE-2023-44124EPSS 0.10%
The vulnerability is to theft of arbitrary files with system privilege in the Screen recording ("com.lge.gametools.gamerecorder") app in the "com/lge/gametools/gamerecorder/settings/ProfilePreferenceFragment.java" file. The main problem is…
- 7.8CVE-2023-44122EPSS 0.1%
The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings ("com.lge.lockscreensettings") app in the "com/lge/lockscreensettings/dynamicwallpaper/MyCategoryGuideActivity.java" file. The main problem is…
- 4.8CVE-2023-31014EPSS 0.1%
NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implicit intent meant for the streamer component. A successful exploit of this vulnera…
- 8.1CVE-2022-4903EPSS 0.7%
A vulnerability was found in CodenameOne 7.0.70. It has been classified as problematic. Affected is an unknown function. The manipulation leads to use of implicit intent for sensitive communication. It is possible to launch the attack remo…
- 5.5CVE-2022-36830EPSS 0.2%
PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via implicit intent.
- 5.5CVE-2022-36829EPSS 0.2%
PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via implicit intent.
- 5.5CVE-2022-33734EPSS 0.2%
Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection information without permission.
- 3.3CVE-2022-33733EPSS 0.2%
Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection information without permission.