CVE-2024-44336

Summary

CVE-2024-44336 is a vulnerability affecting AnkiDroid Android Application version 2.17.6. This issue enables attackers to gain unauthorized access to internal files in the /data/data/com.ichi2.anki/ directory and save them to publicly accessible storage. The exploitation of this vulnerability could potentially lead to sensitive information disclosure, posing a significant risk to user privacy. AnkiDroid developers are urged to address this issue promptly and issue a software update to mitigate the threat. Users are also encouraged to keep their applications up-to-date to protect against known vulnerabilities.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.