CVE-2023-27648

Name of the Vulnerable Software and Affected Versions T-ME Studios Change Color of Keypad version 1.275.1.277

Description A Directory Traversal issue allows a remote attacker to execute arbitrary code via the dex file in the internal storage. This enables the attacker to potentially access and manipulate sensitive data.

Recommendations For version 1.275.1.277, consider restricting access to the internal storage to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the dex file in the internal storage. At the moment, there is no information about a newer version that contains a fix for this vulnerability.