Skip to content
OpenAdvisories
High · 8.2 CVE-2024-11136 EUVD-2024-33673GHSA-rp5c-5f3v-2mgj

Arbitrary file removal via path traversal in TCL Camera

Published Nov 14, 2024 · Updated Nov 14, 2024 · Assigned by CERT-PL

Description

The default TCL Camera application exposes a provider vulnerable to path traversal vulnerability. Malicious application can supply malicious URI path and delete arbitrary files from user’s external storage.

Affected products

VendorProductAffectedFixed
TCL Camera v6.00.04.0067.3.0 —

References