CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-11-13
Android ExternalStorageProvider File Path Filter Bypass via Incorrect Unicode Normalization (CVE-2024-43093)
[Affected Scope] Mobile devices running Android OS utilizing the ExternalStorageProvider component
[Impact] Local attackers can bypass file path filters to access sensitive system directories, leading to local privilege escalation without requiring elevated execution privileges
[Mitigation] Apply the Google Android March 2025 security patch and upgrade device firmware to the latest version