description: Improper input validation vulnerability in AR Emoji Editor prior to version 4.4.03.5 in Android Q(10.0) and above allows untrusted applications to access arbitrary files with an escalated privilege.
problem types: CWE-20: Improper Input Validation
affected:
{
product: AR Emoji Editor
vendor: Samsung Mobile
versions:
lessThan: 4.4.03.5 in Android Q(10.0) and above, status: affected, version: -, versionType: custom
}
metrics:
other: [
content: {'vectorString': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'}
type: unknown
]