CVE-2024-43082
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Nov 13, 2024
Updated: Nov 15, 2024
CWE ID 125
Summary
CVE-2024-43082 is a vulnerability affecting the EditUserPhotoController.java module. In this component, there is a confused deputy issue in the onActivityResult function. This confusion allows for potential cross-user media reading, leading to local information disclosure without requiring any additional execution privileges. Notably, user interaction is not essential for an attacker to exploit this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.