CoreCVE
Back

MEDIUM

The SHAREit application before 4.0.42 for Android allows a remote attacker (on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated) to download arbitrary files from the device including contacts, photos, videos, sound clips, etc

Published Mar 22, 2019

Description

The SHAREit application before 4.0.42 for Android allows a remote attacker (on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated) to download arbitrary files from the device including contacts, photos, videos, sound clips, etc. The attacker must be authenticated as a "recognized device."

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-639

Authorization Bypass

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Mar 22, 2019
Updated Aug 4, 2024
Reserved Mar 22, 2019
Link CVE-2019-9938
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2019-9938
Red Hat
Severity n/a
Public date n/a
Links CVE-2019-9938