Skip to content
OpenAdvisories
Low · 3.3 CVE-2024-20805 EUVD-2024-18520GHSA-88ww-j9jx-rp23

Path traversal vulnerability in ZipCompressor of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.…

Published Jan 4, 2024 · Updated Jun 3, 2025 · Assigned by SamsungMobile

Description

Path traversal vulnerability in ZipCompressor of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary file.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Jan-2024 Release in Android 11, 12 and MyFiles prior to version 14.5.00.21 in Android 13

Advisories 1

References