CVE-2023-33880

1th percentile — higher than 1% of all known CVEs

In the music service, there is a missing permission check, which could lead to local information disclosure with no additional execution privileges needed.

The lack of proper permission controls may allow unauthorized access to sensitive data, posing a threat to user privacy.

It is recommended to implement appropriate permission checking mechanisms in the music service to prevent unauthorized access to information.