VYPR

CWE-925

Improper Verification of Intent by Broadcast Receiver

VariantIncomplete

Description

The Android application uses a Broadcast Receiver that receives an Intent but does not properly verify that the Intent came from an authorized source.

Certain types of Intents, identified by action string, can only be broadcast by the operating system itself, not by third-party applications. However, when an application registers to receive these implicit system intents, it is also registered to receive any explicit intents. While a malicious application cannot send an implicit system intent, it can send an explicit intent to the target application, which may assume that any received intent is a valid implicit system intent and not an explicit intent from another application. This may lead to unintended behavior.

Hierarchy (View 1000)

Parents

Children

none

Related attack patterns (CAPEC)

CAPEC-499

CVEs mapped to this weakness (3)

  • CVE-2024-10576CriDec 4, 2024
    Mim.infinix
    Infinix
    risk 0.61cvss —epss 0.00

    Infinix devices contain a pre-loaded "com.transsion.agingfunction" application, that exposes an unsecured broadcast receiver. An attacker can communicate with the receiver and force the device to perform a factory reset without any Android system permissions.  After multiple…

  • CVE-2026-33173MedMar 24, 2026
    Rubyonrails
    Rails
    risk 0.27cvss 5.3epss 0.00

    Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, `DirectUploadsController` accepts arbitrary metadata from the client and persists it on the blob. Because internal flags like `identified` and…

  • CVE-2023-44126LowSep 27, 2023
    LG
    Call Management
    risk 0.23cvss 3.6epss 0.00

    The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as call states,…