Felix Segoviano

An exported activity allows external applications to gain application context and directly launch Gmail with inbox access, bypassing security controls. This allows unauthorized access to Gmail inboxes.

The issue allows the capture of Gmail authentication tokens, which can be reused to access a user's Gmail account without proper authorization. This affects the PrinterShare Android application.

A double-free condition occurs during the cleanup of temporary image files, which can be exploited to achieve memory corruption and potentially arbitrary code execution.

An Out of Bounds Write occurs when the native library attempts PDF rendering, which can be exploited to achieve memory corruption and potentially arbitrary code execution.

A vulnerability has been identified in reconFTW where inadequate validation of retrieved subdomains may lead to a Remote Code Execution (RCE) attack. An attacker can exploit this vulnerability by crafting a malicious Content Security Policy (CSP) entry on its own domain. Successful exploitation can lead to the execution of arbitrary code within the context of the application, potentially compromising the system.