Use of Implicit Intent for Sensitive Communication in GeForce NOW for Android mobile and TV app - CVE-2023-31014
Published: August 29, 2023
Vulnerability identifier: #VU80054
CSH Severity: Low
CVSS v4: 5.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-31014
CWE-ID: CWE-927
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to execute arbitrary code on the target system.
The vulnerability exists due to use of implicit intent for sensitive communication in the game launcher component. A local user can execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
GeForce NOW for Android mobile and TV app
How to mitigate CVE-2023-31014
Install updates from vendor's website.
GeForce NOW for Android mobile and TV app - update to 6.05.33200069