CVE-2024-0052

2024-03-1116:35:22

google_android

github.com

healthconnect

exercise route data

leakage

missing permission check

local information disclosure

user interaction

AI Score

6.3

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In multiple functions of healthconnect, there is a possible leakage of exercise route data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Android",
    "versions": [
      {
        "status": "affected",
        "version": "14"
      }
    ],
    "defaultStatus": "unaffected"
  }
]