Design/Logic Flaw

2023-12-3103:15:00

PRIOn knowledge base

www.prio-n.com

gallery3d

tecno camon x ca7

data privacy

security flaw

image file extension

nvd

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

JSON

Gallery3d on Tecno Camon X CA7 devices allows attackers to view hidden images by navigating to data/com.android.gallery3d/.privatealbum/.encryptfiles and guessing the correct image file extension.

References

github.com/tahaafarooq/gallery3d-tecno-exploit/

hackmd.io/%40tahaafarooq/bypassing-gallery3d-in-tecno-camon-x