CVE-2024-20805

Published Jan 4, 2024 CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Description
Path traversal vulnerability in ZipCompressor of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary file.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-18520 Path traversal vulnerability in ZipCompressor of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary file.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
SamsungMobile
Published
Updated
Jun 3, 2025, 2:42 PM
Reserved
Dec 5, 2023, 4:57 AM
Status
Modified
Published
Jan 4, 2024, 1:15 AM
Modified
Jun 17, 2026, 7:07 AM