CVE-2010-4804

The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents...

4.3 MediumPublic exploit

The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSettings.java in com/android/browser/.

Exploit likelihood

27.2%Down 53.2 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Record: CVE-2010-4804
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:P/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

CVE List No score

Record: CVE-2010-4804
Updated: 2026-11-02

EUVDEUVD-2010-4769 No score

Record: EUVD-2010-4769
Updated: 2026-11-03

GitHub AdvisoriesGHSA-834r-289g-ffcv No score

The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents...

Record: GHSA-834r-289g-ffcv
Weakness: CWE-200
Updated: 2026-11-02

Affected products

google android

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Google Android - 'content://' URI Multiple Information Disclosure Vulnerabilities	2011-11-28
Metasploit	Android Content Provider File Disclosure
PoC in GitHub	thomascannon/android-cve-2010-4804	2014-02-06

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-4804 is a medium vulnerability (CVSS 4.3) in Google Android, published June 9, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 27.2%, the 98th percentile. No source names a fixed version.

References

Show 4 moreShow less