CVE catalog

CVE-2024-0053

UBUNTU-CVE-2024-0053

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.12% · Oct 25, 2026

In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntuandroid-platform-frameworks-base16.0421-2vulnerable
Ubuntuandroid-platform-frameworks-base16.0421-2.1vulnerable
Ubuntuandroid-platform-frameworks-base16.041:6.0.0+r26-3vulnerable
Ubuntuandroid-platform-frameworks-base16.041:6.0.1+r16-1vulnerable
Ubuntuandroid-platform-frameworks-base18.041:7.0.0+r33-1vulnerable
Ubuntuandroid-platform-frameworks-base18.041:8.1.0+r23-3~18.04vulnerable
Ubuntuandroid-platform-frameworks-base20.041:8.1.0+r23-3build1vulnerable
Ubuntuandroid-platform-frameworks-base20.041:8.1.0+r23-3build2vulnerable
Ubuntuandroid-platform-frameworks-base22.041:10.0.0+r36-3vulnerable
Ubuntuandroid-platform-frameworks-base24.041:13.0.0+r66-1vulnerable
Ubuntuandroid-platform-frameworks-base24.041:14~beta1-2build2vulnerable
Ubuntuandroid-platform-frameworks-base24.041:14~beta1-2build3vulnerable

Fixed-version evidence

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References