CyberRota Analysis
AI-GeneratedA permissions bypass vulnerability in the MediaProvider.java component of Java allows unauthorized access to location metadata, potentially leading to local information disclosure without requiring additional execution privileges or user interaction. Organizations utilizing affected Java versions should prioritize addressing this issue to mitigate risks associated with unauthorized data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.