CVE-2024-49411

Name of the Vulnerable Software and Affected Versions ThemeCenter versions prior to SMR Dec-2024 Release 1

Description The issue allows physical attackers to copy apk files to an arbitrary path with ThemeCenter privilege. This is due to a path traversal vulnerability in ThemeCenter.

Recommendations For versions prior to SMR Dec-2024 Release 1, update to SMR Dec-2024 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the ThemeCenter privilege to minimize the risk of exploitation.