Lucene search

[email protected]CVE-2023-52275

HistoryDec 31, 2023 - 3:15 a.m.

CVE-2023-52275

2023-12-3103:15:46

CWE-862

[email protected]

web.nvd.nist.gov

cve-2023-52275

gallery3d

tecno camon x ca7

unauthorized access

hidden images

data privacy

security vulnerability

2.1 Low

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Gallery3d on Tecno Camon X CA7 devices allows attackers to view hidden images by navigating to data/com.android.gallery3d/.privatealbum/.encryptfiles and guessing the correct image file extension.

Affected configurations

NVD

Node

tecno-mobilecamon_x_firmwareMatch-

AND

tecno-mobilecamon_xMatch-

CPENameOperatorVersion
tecno-mobile:camon_x_firmwaretecno-mobile camon x firmwareeq-

CPE	Name	Operator	Version
tecno-mobile:camon_x_firmware	tecno-mobile camon x firmware	eq	-

References

github.com/tahaafarooq/gallery3d-tecno-exploit/

hackmd.io/%40tahaafarooq/bypassing-gallery3d-in-tecno-camon-x

2.1 Low

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVE-2023-52275

nvd1 cvelist1 prion1