CVE-2023-47889

HIGH

BINHDRM26 1.0.3 - Privilege Escalation

Title source: llm
STIX 2.1

Description

The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broadcast receivers. These exposed actions can allow any app on the device to send unauthorized broadcasts, leading to unintended consequences. The vulnerability is particularly concerning because these actions include powering off, system reboot & entering recovery mode.

Exploits (1)

nomisec WRITEUP 1 stars
by actuator · poc
https://github.com/actuator/com.bdrm.superreboot

References (1)

Core 1

Scores

CVSS v3 7.8
EPSS 0.0016
EPSS Percentile 36.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-927
Status published
Products (1)
binhdrm26/super_reboot 1.0.3
Published Feb 06, 2024
Tracked Since Feb 18, 2026