Lucene search

K
osvGoogleOSV:ASB-A-294406604
HistoryJul 01, 2024 - 12:00 a.m.

Reveal files across users via MediaProvider

2024-07-0100:00:00
Google
osv.dev
mediaprovider
file disclosure
input validation
local information disclosure
user interaction

6.5 Medium

AI Score

Confidence

High

In ensureFileColumns of MediaProvider.java, there is a possible disclosure of files owned by another user due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

6.5 Medium

AI Score

Confidence

High