BIT-nextcloud-2021-32694

vendorUSosv

Malicious Android application can crash the Nextcloud Android Client

view advisory published 2026-07-12Licence: per source

Nextcloud Android app is the Android client for Nextcloud. In versions prior to 3.15.1, a malicious application on the same device is possible to crash the Nextcloud Android Client due to an uncaught exception. The vulnerability is patched in version 3.15.1.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-32694US	medium5.5	0.97% (62nd)	—	2021-06-17
Nextcloud Android app is the Android client for Nextcloud. In versions prior to 3.15.1, a malicious application on the same device is possible to crash the Nextcloud Android Client…

references

External citations — patches, advisories, analysis.

https://github.com/nextcloud/android/pull/7919ADVISORY
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-h2gm-m374-99vcADVISORY
https://hackerone.com/reports/859136ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2021-32694WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan