CVE-2024-43093: Technical Deep-Dive (Auto Refreshed)

Generated on 2026-03-24T21:32:03.649Z. This file is automatically regenerated every 30 minutes by the CVE AI enrichment job using web sources (NVD, MITRE, CISA KEV, GitHub).

Executive Technical Summary

In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

• Context preserved from previous revision: In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Notes: A Huge Learning Resources with Labs For Offensive Security Players

Technical Details

• CVE: CVE-2024-43093
• KEV date added: 2024-11-07
• KEV due date: 2024-11-28
• NVD published: 2024-11-13
• NVD modified: 2025-10-23
• MITRE modified: 2025-10-21
• CVSS base score: 7.3
• CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
• CVSS exploitability score: 1.3
• CVSS impact score: 5.9
• Attack vector: Local
• Attack complexity: Low
• Privileges required: Low
• User interaction: Required
• Scope: Unchanged
• Confidentiality impact: High
• Integrity impact: High
• Availability impact: High

Versions and Products Impacted

• google / android (versions: 12.0)
• google / android (versions: 12.1)
• google / android (versions: 13.0)
• google / android (versions: 14.0)
• google / android (versions: 15.0)
• Google / Android (versions: 15, 14, 13, 12L, 12)

Weakness Classification

• CWE-176
• Elevation of privilege

Repositories for Lab Validation (Public Examples)

• Zeyad-Azima/Offensive-Resources | stars: 1114 | updated: 2026-03-22 | https://github.com/Zeyad-Azima/Offensive-Resources
  Notes: A Huge Learning Resources with Labs For Offensive Security Players
• ShubhamDubeyy/Aurex | stars: 3 | updated: 2026-02-26 | https://github.com/ShubhamDubeyy/Aurex
  Notes: Burp Suite extension for detecting PortSwigger Top 10 Web Hacking Techniques (2025) — 8 modules, 250+ CVE-backed payloads
• packetinside/CISA_BOT | stars: 0 | updated: 2025-08-08 | https://github.com/packetinside/CISA_BOT
  Notes: CISA Bot is a GitHub bot that automatically monitors the Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) Catalog. When new vulnerabilities are published in the KEV, the bot creates GitHub issues in this repository with detailed information about each vulnerability.

People and Organizations Mentioned

• google_android
• Android
• Framework
• Zeyad-Azima
• ShubhamDubeyy
• packetinside

Practical Defensive Validation (Authorized Only)

1. Use only isolated environments and systems you own or are explicitly authorized to test.
2. Snapshot infrastructure before validation and preserve baseline logs (EDR, SIEM, OS, app).
3. Create low-privilege users on google / android (versions: 12.0) and validate that patching blocks unauthorized admin-level actions.
4. Compare token/privilege transitions in Windows Event Logs before and after remediation.
5. Tune detections for unusual group membership changes and SYSTEM-level process launches from user sessions.

References

• NVD record: https://nvd.nist.gov/vuln/detail/CVE-2024-43093
• MITRE CVE record: https://www.cve.org/CVERecord?id=CVE-2024-43093
• CISA KEV Catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• CISA KEV JSON feed: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
• KEV notes: https://source.android.com/docs/security/bulletin/2024-11-01 ; https://nvd.nist.gov/vuln/detail/CVE-2024-43093
• https://android.googlesource.com/platform/frameworks/base/+/7f83c671626f9bf993581f4598c22482d87cba10
• https://source.android.com/security/bulletin/2025-03-01
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-43093
• Repository example: https://github.com/Zeyad-Azima/Offensive-Resources
• Repository example: https://github.com/ShubhamDubeyy/Aurex
• Repository example: https://github.com/packetinside/CISA_BOT

This content is for defensive security training and authorized validation only.