CVE-2023-52275

Katalog CVE

CVSS 2.1 · Low EPSS 0,28%

Kerentanan Missing Authorization pada tecno-mobile camon x firmware. Skor CVSS 3.1 2.1 (Low) menurut NVD.

Deskripsi (NVD)

Gallery3d on Tecno Camon X CA7 devices allows attackers to view hidden images by navigating to data/com.android.gallery3d/.privatealbum/.encryptfiles and guessing the correct image file extension.

Rincian

Terbit di NVD

31 Desember 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

2.1 (Low), sumber NVD
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-862: Missing Authorization

EPSS (30 hari)

0,28% peluang dieksploitasi; lebih tinggi dari 19,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/tahaafarooq/gallery3d-tecno-exploit/ exploit
• https://hackmd.io/%40tahaafarooq/bypassing-gallery3d-in-tecno-camon-x exploit