CVE-2023-44121 - CVE House
Back to Database
Status published Medium CVE-2023-44121

LG ThinQ Service - Intent redirection with system privilege/LaunchAnyWhere

Vulnerability Description

The vulnerability is an intent redirection in LG ThinQ Service ("com.lge.lms2") in the "com/lge/lms/things/ui/notification/NotificationManager.java" file. This vulnerability could be exploited by a third-party app installed on an LG device by sending a broadcast with the action "com.lge.lms.things.notification.ACTION". Additionally, this vulnerability is very dangerous because LG ThinQ Service is a system app (having android:sharedUserId="android.uid.system" setting). Intent redirection in this app leads to accessing arbitrary not exported activities of absolutely all apps.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-44121

Credits & Attribution

No credits recorded in the NVD database.

References

More from LG Electronics

View All →
CVE-2025-10204
Unauth Admin Reset Password on AC Smart II
High 7.1
CVE-2024-6179
XSS vulnerability in LG SuperSign CMS
Medium 4.8
CVE-2024-6178
XSS vulnerability in LG SuperSign CMS
Medium 4.8
CVE-2024-6177
XSS vulnerability in LG SuperSign CMS
Medium 4.8
CVE-2024-6176
Port scanning vulnerability in LG SuperSign CMS
Medium 4.8

Affected Vendor

LG Electronics

View all reports →

Affected Software

LG V60 Thin Q 5G(LMV600VM)
Vulnerable Versions:
Android 9

Timeline

Official Publish: September 27th, 2023
Last Modified: September 23rd, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L

Weaknesses (CWE)

CWE-926

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.