Path Traversal in BlueLM Copilot via Intent Handling

Executive Summary

This is a Path Traversal vulnerability in BlueLM Copilot's ShareActivity component. It allows a malicious app on the same device to write arbitrary files by exploiting a crafted intent with '..' sequences in a file name provided via a ContentProvider.

Useful 0 Not Useful 0

Detection Guidance

Detection requires checking for vulnerable versions of BlueLM Copilot (com.vivo.ai.copilot) and analyzing intents for path traversal patterns. Inspect installed apps for the package name and review intent logs for crafted ACTION_SEND with '..' sequences.

Useful 0 Not Useful 0

Impact Analysis

An attacker could overwrite sensitive files, install malware, or corrupt data on your device by exploiting this flaw through a malicious app.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows arbitrary file writes via path traversal, which could lead to unauthorized data access or modification. For GDPR, this may violate principles of data integrity and confidentiality. For HIPAA, it could risk protected health information exposure if exploited on devices handling such data.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately uninstall or update BlueLM Copilot to a patched version. Restrict app installations to trusted sources and monitor for suspicious file writes or intent usage.

Useful 0 Not Useful 0