CVE-2023-52275

Gallery3d on Tecno Camon X CA7 devices allows attackers to view hidden images by navigating to data/com.android.gallery3d/.privatealbum/.encryptfiles and guessing the correct image file extension.

Score

CVSS 3.1 2.1 Low

Status

Modified - cve@mitre.org

Published

2023-12-31

Last modified

2024-08-02

Weaknesses

CWE-862

Affected products

• Camon X Firmware (Tecno-mobile)

References

• https://github.com/tahaafarooq/gallery3d-tecno-exploit/
• https://hackmd.io/%40tahaafarooq/bypassing-gallery3d-in-tecno-camon-x