Skip to content
OpenAdvisories
Medium · 5.0 CVE-2024-43090 EUVD-2024-40032GHSA-gv8f-7qqp-f8mr

In multiple locations, there is a possible cross-user image read due to a missing permission check. This could lead to local information di…

Published Nov 13, 2024 · Updated Aug 26, 2025 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In multiple locations, there is a possible cross-user image read due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 15, 14, 13, 12L, 12 —

Advisories 3

References