Description
The default TCL Camera application exposes a provider vulnerable to path traversal vulnerability. Malicious application can supply malicious URI path and delete arbitrary files from user’s external storage.
Scores
CVSS v4
8.2
EPSS
0.0022
EPSS Percentile
45.0%
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-35
Status
published
Products (1)
TCL/Camera
v6.00.04.0067.3.0
Published
Nov 14, 2024
Tracked Since
Feb 18, 2026