Skip to content
OpenAdvisories
High · 7.6 CVE-2024-8058 EUVD-2024-49613GHSA-rpq3-9v7c-qwm4

An improper parsing vulnerability was reported in the FileZ client that could allow a crafted file in the FileZ directory to read arbitrary…

Published Dec 16, 2024 · Updated Aug 27, 2025 · Assigned by lenovo

Description

An improper parsing vulnerability was reported in the FileZ client that could allow a crafted file in the FileZ directory to read arbitrary files on the device due to URL preloading.

Affected products

VendorProductAffectedFixed
Lenovo FileZ Client < 9.8.6.0 9.8.6.0

References