CVE Feed

    Dashboard / CVE / CVE-2023-29731

    CVE-2023-29731

    SoLive 1.6.14 thru 1.6.20 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the application is opened. When an attacker injects too much data, the application will trigger an OOM error and crash at startup, resulting in a persistent denial of service.

    Published:May 30, 2023
    Last Modified:Jan 13, 2025
    EPS:May 30, 2023
    EPSS Score:0.00082
    CVSS Score:7.5

    Affected Products

    Vendor
    Loka
    Product
    Solive

    Common Weakness Enumeration

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High