PT-2023-15136 · Timmystudios · Timmystudios Fast Typing Keyboard

Published 2023-04-14 · Updated 2025-02-07 · CVE-2022-47027

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Timmystudios Fast Typing Keyboard version 1.275.1.162

Description The issue allows unauthorized apps to overwrite arbitrary files in the internal storage of Timmystudios Fast Typing Keyboard via a dictionary traversal vulnerability, which can lead to arbitrary code execution.

Recommendations For version 1.275.1.162, consider restricting access to the internal storage to prevent unauthorized overwrites until a patch is available. As a temporary workaround, avoid using the keyboard's internal storage for sensitive data until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-47027

Affected Products

Timmystudios Fast Typing Keyboard

References · 9

• 🔥 https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2022-47027/CVE%20detail.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-47027 · Security Note
• https://osv.dev/vulnerability/CVE-2022-47027 · Vendor Advisory
• https://t.me/cvenotify/110479 · Telegram Post
• https://t.me/cibsecurity/62136 · Telegram Post
• https://t.me/cvenotify/48265 · Telegram Post
• https://corporate.timmystudios.com · Note
• https://t.me/cvenotify/48230 · Telegram Post
• https://play.google.com/store/apps/details?id=com.jb.gokeyboard.theme.timssfasttypingkeyboard · Note