CVE-2026-60117

The Android implementation of the Flutter/Dart receive_sharing_intent package (versions 1.4.1 through 1.9.0 ) is vulnerable to a path traversal vulnerability in FileDirectory.getDataColumn. A malicious co-resident application can exploit this by providing a crafted _display_name value via an untr...

EUVD-2026-120158

The Android implementation of the Flutter/Dart receivesharingintent package, versions 1.4.1 through 1.9.0, contains a path traversal vulnerability in FileDirectory.getDataColumn that allows a malicious co-resident application to write files outside the intended cache directory by supplying a...