VDB

CISA-2024-43090

CISA-2024-43090 PUBLISHED CVSS 5 MEDIUM

Reported by google_android · Published November 13, 2024

In multiple locations, there is a possible cross-user image read due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.

Risk Scores

CVSS 3.1
5
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
GoogleAndroid15, 14, 13
GoogleAndroid14, 13, 12

Timeline

  • Nov 13, 2024 CVE Published
  • Aug 26, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›