CVE-2024-8058

Published: Dec 16, 2024Modified: Jun 17, 2026Deferred

7.6

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

Exploitability: 2.8 / Impact: 4.7

Source: psirt@lenovo.com (Secondary)

Description

An improper parsing vulnerability was reported in the FileZ client that could allow a crafted file in the FileZ directory to read arbitrary files on the device due to URL preloading.

Related CWEs

CWE-1287

Improper Validation of Specified Type of Input

The product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.

References (1)

https://www.filez.com/securityPolicy/1.html?1733849740

Source: psirt@lenovo.com

Timeline

No history available yet.