Auth Bypass in Quickshare
Key facts
- Attack vector
- Adjacent network
- Privileges required
- Low
- User interaction
- Active
- Attack complexity
- High
- Attack requirements
- None
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Low · High · Low
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-434.
Summary
There exists an auth bypass in Google Quickshare where an attacker can upload an unknown file type to a victim. The root cause of the vulnerability lies in the fact that when a Payload Transfer frame of type FILE is sent to Quick Share, the file that is contained in this frame is written to disk in the Downloads folder. Quickshare normally deletes unkown files, however an attacker can send two Payload transfer frames of type FILE and the same payload ID. The deletion logic will only delete the first file and not the second. We recommend upgrading past commit 5d8b9156e0c339d82d3dab0849187e8819ad92c0 or Quick Share Windows v1.0.2002.2
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Nearby | before 1.0.2002.2 | 1.0.2002.2 | Patch available | CNA |
- Nearby VendorGoogle Affected before 1.0.2002.2 Fixed in 1.0.2002.2 Patch available CNA
Remediation
- Fix · CNA Nearby (Google) Fixed in 1.0.2002.2
Timeline
- 2026-10-02 Threatist record created from CVE-2024-10668
- 2026-10-03 Alias added: GHSA-j9g6-vvr6-x5wm
References
Sources
- CVE-2024-10668 · CVE Program
- CVE-2024-10668 · NVD
- FIRST EPSS
- GHSA-j9g6-vvr6-x5wm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences