Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2024-11-28. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
5 versions affected across 1 product
【ITニュース】Googleが9月のAndroidセキュリティ更新を公開。リモートコード実行の脆弱性など計47件を修正。System componentの脆弱性(CVE-2024-43093)は深刻度「Critical」に分類。定期的なセキュリティパッチ適用がシステム防御の基本です。(出典: Google) https://t.co/ColAhnl5RI
Post summary
Google announced its July 2024 Android security update, correcting 47 issues including the critical CVE‑2024‑43093 RCE vulnerability in System components. The focus is on applying the new patch.
5 of 5 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | android | 12.0 | - | - | |
| OS | android | 12.1 | - | - | |
| OS | android | 13.0 | - | - | |
| OS | android | 14.0 | - | - | |
| OS | android | 15.0 | - | - |