PT-2024-27911 · Unknown · Quick Share

Published 2024-04-17 · Updated 2025-04-07 · CVE-2024-38272

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:A/AC:H/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L

Name of the Vulnerable Software and Affected Versions Quick Share versions prior to 1.0.1724.0

Description The issue allows an attacker to bypass the accept file dialog on Quick Share Windows. Normally, the Quick Share Windows app requires user acceptance from the receiving device to send a file when visibility is set to everyone mode or contacts mode.

Recommendations For versions prior to 1.0.1724.0, upgrade to version 1.0.1724.0 or above to resolve the issue.

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

CWE-294

Related Identifiers

BDU:2025-05014

CVE-2024-38272

Affected Products

Quick Share

References · 14

• https://github.com/google/nearby/pull/2402 · Patch
• https://github.com/google/nearby/pull/2589 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-38272 · Security Note
• https://osv.dev/vulnerability/CVE-2024-38272 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05014 · Security Note
• https://t.me/true_secator/6087 · Telegram Post
• https://twitter.com/fletch_ai/status/1823268488473120777 · Twitter Post
• https://twitter.com/shah_sheikh/status/1907788293523095864 · Twitter Post
• https://twitter.com/pentra_ai/status/1823287554566701140 · Twitter Post
• https://twitter.com/VSchwaberow/status/1908004986606301219 · Twitter Post
• https://t.me/cvenotify/84651 · Telegram Post
• https://t.me/cvenotify/84505 · Telegram Post
• https://twitter.com/syedaquib77/status/1909135247293161863 · Twitter Post
• https://t.me/cvenotify/95798 · Telegram Post