Vulnerability Description
SoLive 1.6.14 thru 1.6.20 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the application is opened. When an attacker injects too much data, the application will trigger an OOM error and crash at startup, resulting in a persistent denial of service.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Loka | Solive | >= 1.6.14, <= 1.6.20 |
Related Weaknesses (CWE)
References
- https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29731/CVE%20detail.mdExploitThird Party Advisory
- https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29731/CVE%20detail.mdExploitThird Party Advisory
- https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29731/CVE%20detail.mdExploitThird Party Advisory
FAQ
What is CVE-2023-29731?
CVE-2023-29731 is a vulnerability with a CVSS score of 7.5 (HIGH). SoLive 1.6.14 thru 1.6.20 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into an...
How severe is CVE-2023-29731?
CVE-2023-29731 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-29731?
Check the references section above for vendor advisories and patch information. Affected products include: Loka Solive.