CVE-2024-20804

Name of the Vulnerable Software and Affected Versions MyFiles versions prior to SMR Jan-2024 Release 1 in Android 11 and Android 12 MyFiles version 14.5.00.21 in Android 13

Description The issue allows local attackers to write arbitrary files due to a path traversal vulnerability in the FileUriConverter of MyFiles. This vulnerability enables attackers to potentially access and modify sensitive data.

Recommendations For MyFiles versions prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, update to a version that includes the SMR Jan-2024 Release 1 or later. For MyFiles version 14.5.00.21 in Android 13, update to a version later than 14.5.00.21. As a temporary workaround, consider restricting access to the FileUriConverter to minimize the risk of exploitation.