CVE-2024-20805

Name of the Vulnerable Software and Affected Versions MyFiles versions prior to SMR Jan-2024 Release 1 in Android 11 and Android 12 MyFiles version 14.5.00.21 in Android 13

Description A path traversal vulnerability in the ZipCompressor of MyFiles allows local attackers to write arbitrary files. This issue affects MyFiles in Android 11, Android 12, and a specific version in Android 13.

Recommendations For MyFiles versions prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, update to a version that includes the SMR Jan-2024 Release 1 or later. For MyFiles version 14.5.00.21 in Android 13, update to a version later than 14.5.00.21. As a temporary workaround, consider restricting access to the ZipCompressor component until a patch is available.