Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2024-11136

Arbitrary file removal via path traversal in TCL Camera

Description

The default TCL Camera application exposes a provider vulnerable to path traversal vulnerability. Malicious application can supply malicious URI path and delete arbitrary files from user’s external storage.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TCL Camera

Default version status: unknown

  • v6.00.04.0067.3.0affected

References