Android MmsProvider Path Traversal Vulnerability Allowing Arbitrary File Deletion
Vulnerability
A path traversal vulnerability in the MmsProvider component of Android allows for the arbitrary deletion of files related to telephony, SMS, and MMS functionalities. This issue could cause a local denial-of-service condition, disrupting these communication services. The vulnerability arises from improper handling of file paths, which could be exploited to delete critical files without requiring additional execution privileges or user interaction.
Impact
Exploitation of this vulnerability could lead to a local denial-of-service condition, disrupting SMS and MMS functionalities.
Added: Mar 2, 2026, 7:43 PM
Updated: Mar 2, 2026, 9:03 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
3.1exploitability
3.3remediation
0.0relevance
3.4threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
