CVE-2021-32694 — Uncaught Exception in Security-advisories

CWE-248 — Uncaught Exception2 documents2 sources
Severity
5.5MEDIUMNVD
CNA4.1
EPSS
0.2%
top 53.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Nextcloud Security-advisoriesNextcloud
Timeline
PublishedJun 17

Description

Nextcloud Android app is the Android client for Nextcloud. In versions prior to 3.15.1, a malicious application on the same device is possible to crash the Nextcloud Android Client due to an uncaught exception. The vulnerability is patched in version 3.15.1.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDnextcloud/nextcloud< 3.15.1
▶CVEListV5nextcloud/security-advisories< 3.15.1

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

1
CVEList
Malicious Android application can crash the Nextcloud Android Client↗2021-06-17
▶
CVE-2021-32694 — Uncaught Exception | cvebase