5 matches found
CVE-2024-0032
CVE-2024-0032 affects the Android Framework (FileSystemProvider.java, queryChildDocuments) and enables local escalation of privilege due to improper input validation. Impact is described as Elevation of Privilege with HIGH confidentiality/integrity/availability impact; exploit requires user inter...
PT-2024-15308
Name of the Vulnerable Software and Affected Versions FileSystemProvider.java affected versions not specified Description The issue is related to improper input validation in the queryChildDocuments function of FileSystemProvider.java. This could allow access to directories that should be hidden,...
CVE-2021-0337
In moveInMediaStore of FileSystemProvider.java, there is a possible file exposure due to stale metadata. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-...
CVE-2021-0337: Cleartext Storage of Sensitive Information
In moveInMediaStore of FileSystemProvider.java, there is a possible file exposure due to stale metadata. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-...
PT-2021-13018
Name of the Vulnerable Software and Affected Versions: Android versions Android-8.1 through Android-11 Description: In the moveInMediaStore function of FileSystemProvider.java, there is a possible file exposure due to stale metadata. This could lead to local escalation of privilege with User...