Threats tagged 'ghsa-jgqv-5673-896c'

A vulnerability in Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger displays allows a physical occupant to view sensitive Heads-Up Notification (HUN) content and perform actions for a secure passenger user without authentication. This occurs because the HUN system only checks the global keyguard state linked to the driver's unlocked display, and the PassengerKeyguard fails to suppress notifications or intercept action intents. As a result, private notification data can be exposed and unauthorized actions executed without credential verification.