packages_providers_MediaProvider_AOSP10_r33_CVE-2021-0340

В этом репозитории нет README...

platform_packages_providers_MediaProvider_CVE-2023-40127

Ce depot n’a pas de fichier README...

packages_providers_MediaProvider_CVE-2023-40127

Ce depot n’a pas de fichier README...

platform_packages_providers_MediaProvider_CVE-2023-40127

Ce depot n’a pas de fichier README...

packages_providers_MediaProvider_AOSP10_r33_CVE-2021-0340

В этом репозитории нет README...

platform_packages_providers_MediaProvider_CVE-2023-40127

Ce depot n’a pas de fichier README...

CVE-2026-28622

In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28671

A race condition vulnerability exists in the updateInternal method of MediaProvider.java within the Media Provider component. This flaw could lead to local information disclosure , allowing an attacker to expose the contents of files without requiring additional execution privileges or user inter...

CVE-2026-28622

A permissions bypass vulnerability exists in the getQueryBuilderInternal method of MediaProvider.java within the Media Provider component. This flaw allows an attacker to retrieve location metadata , potentially resulting in local information disclosure . The vulnerability requires no additional ...

CVE-2026-28622

In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-88234

In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-88218

Name of the Vulnerable Software and Affected Versions MediaProvider affected versions not specified Description A permissions bypass in the getQueryBuilderInternal function within MediaProvider.java allows for the retrieval of location metadata. This issue enables local information disclosure...

ASB-A-395640294

In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android elevation of privilege vulnerability (CNVD-2026-13146)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that is caused by proxy obfuscation in multiple functions of MediaProvider.java that could potentially bypass the external storage write permission. An...

CVE-2026-0024

In isRedactionNeededForOpenViaContentResolver of MediaProvider.java, there is a possible way to reveal the location of media due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-48578

In multiple functions of MediaProvider.java, there is a possible way to bypass the WRITEEXTERNALSTORAGE permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-0035

In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

EUVD-2026-9238

In isRedactionNeededForOpenViaContentResolver of MediaProvider.java, there is a possible way to reveal the location of media due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-48579

In multiple functions of MediaProvider.java, there is a possible external storage write permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48579

In multiple functions of MediaProvider.java, there is a possible external storage write permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...