The download implementation in Google Chrome before 50.0.2661.75 on Android allows remote attackers to bypass intended pathname restrictions via unspecified vectors.
| Software | From | Fixed in |
|---|---|---|
| google / chrome | - | 49.0.2623.112.x |
| suse / linux_enterprise | 12.0 | 12.0.x |
| opensuse / leap | 42.1 | 42.1.x |