Remote Code Execution Vulnerability in Lenovo SHAREit for Android Devices
CVE-2016-4782

8.8HIGH

Key Information:

Vendor
Lenovo
Status
Shareit
Vendor
CVE Published:
23 May 2016

Summary

The vulnerability in Lenovo SHAREit prior to version 3.5.98_ww for Android devices enables remote attackers to exploit a crafted intent scheme URL. This could potentially allow attackers to manipulate specific app behaviors or execute arbitrary code without user consent, posing significant security risks to users of the affected version.

References

https://support.lenovo.com/us/en/product_security/len_6421
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.