Insufficient validation of untrusted input in intents in Google Chrome on Android prior to 78.0.3904.70 allowed a local attacker to leak files via a crafted application.
References
Link | Resource |
---|---|
https://crbug.com/859349 | Permissions Required |
https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html | Vendor Advisory |
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html | Mailing List Third Party Advisory |
Information
Published : 2019-11-25 07:15
Updated : 2022-01-01 12:12
NVD link : CVE-2019-13707
Mitre link : CVE-2019-13707
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
opensuse
- backports
- chrome