What is CVE-2024-49421?

CVE-2024-49421 is a medium-severity vulnerability in Google Android, classified under Path Traversal. CVSS score: 4.3/10. Published 2024-12-03.

How severe is CVE-2024-49421?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Path Traversal in Google Android

CVE-2024-49421

Path traversal in Quick Share Agent prior to version 3.5.14.47 in Android 12, 3.5.19.41 in Android 13, and 3.5.19.42 in Android 14 allows adjacent attackers to write file in arbitrary location.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.004 (27.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Google Android — versions 13.0, 14.0, 12.0
Samsung Quick_share
Samsung Mobile Quick Share Agent — versions 3.5.14.47 in Android 12, 3.5.19.41 in Android 13, and 3.5.19.42 in Android 14

Weakness classification (CWE)

CWE-22 — Path Traversal

References

mobile.security@samsung.com (Vendor Advisory)

Frequently asked questions

What is CVE-2024-49421?: CVE-2024-49421 is a medium-severity vulnerability in Google Android, classified under Path Traversal. CVSS score: 4.3/10. Published 2024-12-03.
How severe is CVE-2024-49421?: Medium severity. CVSS v3 base score is 4.3 out of 10.