CVE-2023-43955

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-43955
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-43955.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-43955
Published
2023-12-27T21:15:08.050Z
Modified
2026-04-10T05:04:02.815799Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The com.phlox.tvwebbrowser TV Bro application through 2.0.0 for Android mishandles external intents through WebView. This allows attackers to execute arbitrary code, create arbitrary files. and perform arbitrary downloads via JavaScript that uses takeBlobDownloadData.

References

Affected packages

Git / github.com/truefedex/tv-bro

Affected ranges

Type
GIT
Repo
https://github.com/truefedex/tv-bro
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5927391b7630dff9a2c2b31530365fde0a2ee7d7
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.0"
        }
    ]
}

Affected versions

Other
latest_webview
v1.*
v1.3.0-alpha
v1.4.1
v1.4.2
v1.4.3
v1.4.4
v1.5.0-alpha
v1.5.1-beta
v1.5.2-beta
v1.5.3-beta
v1.5.4-beta
v1.5.5
v1.5.5-beta
v1.5.6
v1.5.7
v1.5.8
v1.6.0
v1.6.0-alpha2
v1.6.1
v1.6.2
v1.7.0
v1.7.1
v1.7.2
v1.8.0
v1.8.1
v1.8.2
v1.8.3
v1.8.4
v1.8.5
v1.8.6
v2.*
v2.0.0
v2.0.0-alpha
v2.0.0-rc1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-43955.json"