This can result in the execution of arbitrary code. An app may be able to prevent a trusted app from sending or receiving data. An app may be able to read or delete data from outside its permissions policy. An app may be able to prevent another app from updating. Out-of-bounds writes are not always exploitable, but they may allow an app to perform actions that are not authorized. This issue was addressed with improved validation of memory access. An app may be able to read or delete data from outside its permissions policy. An app may be able to prevent another app from updating. OUT-OF-BOUNDS WRITE ISSUES An app may be able to perform arbitrary memory writes. An app may be able to read or delete data from outside its permissions policy. An app may be able to prevent another app from updating.

Vulnerability summary

When using an API to create a new file, an app may be able to read or delete data from outside its permissions policy. An app may be able to prevent another app from updating.
Vulnerable versions: All releases before the current one

Vulnerability Scoring

This issue was addressed with improved validation of memory access.
An app may be able to read or delete data from outside its permissions policy. An app may be able to prevent another app from updating. OUT-OF-BOUNDS WRITE ISSUES An app may be able to perform arbitrary memory writes. An app may be able to read or delete data from outside its permissions policy. An app may be able to prevent another app from updating. VULNERABILITY SCORING An app may be able to read or delete data from outside its permissions policy. An app may be able to prevent another app from updating

Vulnerability scopes

An app may be able to prevent a trusted app from sending or receiving data. An app may be able to read or delete data from outside its permissions policy. An app may be able to prevent another app from updating.
An app may be able to read or delete data from outside its permissions policy. An app may be able to prevent another app from updating.

Timeline

Published on: 08/24/2022 20:15:00 UTC
Last modified on: 09/16/2022 20:04:00 UTC

References