3 results (0.012 seconds)

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1

Keyboard Themes 1.275.1.164 for Android contains a dictionary traversal vulnerability that allows unauthorized apps to overwrite arbitrary files in its internal storage and achieve arbitrary code execution. • https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29736/CVE%20detail.md • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1

Timmystudios Fast Typing Keyboard v1.275.1.162 allows unauthorized apps to overwrite arbitrary files in its internal storage via a dictionary traversal vulnerability and achieve arbitrary code execution. • https://corporate.timmystudios.com https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2022-47027/CVE%20detail.md https://play.google.com/store/apps/details?id=com.jb.gokeyboard.theme.timssfasttypingkeyboard • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 1

Directory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277 allows a remote attacker to execute arbitrary code via the dex file in the internal storage. • https://corporate.timmystudios.com https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27648/CVE%20detail.md https://play.google.com/store/apps/details?id=com.jb.gokeyboard.theme.twchangecolorofkeypad • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •