Threats tagged 'ghsa-wvv2-g99g-c5px'

A path traversal vulnerability exists in the Android implementation of the Flutter/Dart receive_sharing_intent package versions 1.4.1 through 1.9.0. This flaw allows a malicious co-resident app to write files outside the intended cache directory by supplying a crafted _display_name value from an untrusted ContentProvider. Exploitation enables file overwrite within the receiving application's private sandbox without user interaction.