1. Home
  2. CVE Database
  3. CVE-2024-49421
MEDIUM · 4.3

CVE-2024-49421

Path traversal in Quick Share Agent prior to version 3.5.14.47 in Android 12, 3.5.19.41 in Android 13, and 3.5.19.42 in Android 14 allows adjacent attackers to write file in arbitrary location.

Vulnerability Description

Path traversal in Quick Share Agent prior to version 3.5.14.47 in Android 12, 3.5.19.41 in Android 13, and 3.5.19.42 in Android 14 allows adjacent attackers to write file in arbitrary location.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
SamsungQuick Share< 3.5.19.41
GoogleAndroid13.0

Related Weaknesses (CWE)

CWE-22

References

FAQ

What is CVE-2024-49421?

CVE-2024-49421 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Path traversal in Quick Share Agent prior to version 3.5.14.47 in Android 12, 3.5.19.41 in Android 13, and 3.5.19.42 in Android 14 allows adjacent attackers to write file in arbitrary location.

How severe is CVE-2024-49421?

CVE-2024-49421 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-49421?

Check the references section above for vendor advisories and patch information. Affected products include: Samsung Quick Share, Google Android.