---
id: "CVE-2024-43093"
kind: "vulnerability"
aliases: ["CVE-2024-43093"]
title: "google android: In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to\u2026"
severity: "high"
cvss: 7.3
epss: null
exploited: true
status: "open"
category: "runtime"
products: [{"name": "Android Framework", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "google android", "fixed": [], "affected": "= 12.0", "ecosystem": "vendor"}, {"name": "google android", "fixed": [], "affected": "= 12.1", "ecosystem": "vendor"}, {"name": "google android", "fixed": [], "affected": "= 13.0", "ecosystem": "vendor"}, {"name": "google android", "fixed": [], "affected": "= 14.0", "ecosystem": "vendor"}, {"name": "google android", "fixed": [], "affected": "= 15.0", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["android", "exploited", "mobile", "runtime"]
not_affected_if: ["unknown"]
published_at: "2024-11-07T00:00:00+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T22:29:05+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43093", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43093", "first_seen_at": "2026-10-23T22:29:05+00:00"}]
---

# google android: In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to…

Android Framework has an unspecified flaw that lets a local app gain higher privileges on the device. CISA lists it as actively exploited in the wild.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Android Framework affected ? fixed ?
- vendor:google android affected = 12.0 fixed ?
- vendor:google android affected = 12.1 fixed ?
- vendor:google android affected = 13.0 fixed ?
- vendor:google android affected = 14.0 fixed ?
- vendor:google android affected = 15.0 fixed ?

## Fix

Apply the Android security patch that addresses CVE-2024-43093 per vendor instructions; the sources do not name the patch level.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43093
- 2026-10-23T22:29:05+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2024-43093

## From the sources

In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to  incorrect unicode normalization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_