CVE-2023-29736
https://notcve.org/view.php?id=CVE-2023-29736
Keyboard Themes 1.275.1.164 for Android contains a dictionary traversal vulnerability that allows unauthorized apps to overwrite arbitrary files in its internal storage and achieve arbitrary code execution. • https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29736/CVE%20detail.md • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVE-2022-47027
https://notcve.org/view.php?id=CVE-2022-47027
Timmystudios Fast Typing Keyboard v1.275.1.162 allows unauthorized apps to overwrite arbitrary files in its internal storage via a dictionary traversal vulnerability and achieve arbitrary code execution. • https://corporate.timmystudios.com https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2022-47027/CVE%20detail.md https://play.google.com/store/apps/details?id=com.jb.gokeyboard.theme.timssfasttypingkeyboard • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVE-2023-27648
https://notcve.org/view.php?id=CVE-2023-27648
Directory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277 allows a remote attacker to execute arbitrary code via the dex file in the internal storage. • https://corporate.timmystudios.com https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27648/CVE%20detail.md https://play.google.com/store/apps/details?id=com.jb.gokeyboard.theme.twchangecolorofkeypad • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •