An issue in Forkyz versionCode 8500000 permits an attacker to supply a crafted URI string that changes another user’s storage settings, effectively overriding configuration data. This flaw enables unauthorized modification of another account’s storage preferences, which could lead to data corruption, loss, or privilege alteration. The weakness maps to improper access control.

The vulnerability affects the Forkyz Android application with versionCode 8500000. No other vendors or product versions are listed. The issue is relevant to systems running this specific build of Forkyz, primarily on mobile devices that can receive custom URI intents.

The EPSS score is not available and the vulnerability is not listed in CISA’s KEV catalog, so precise exploitation probability cannot be quantified. Based on the description, the likely attack vector is local or opportunistic remote delivery of a crafted URI; an attacker who can make the target device open such a URI—perhaps via a compromised link or malicious app—can influence another user’s storage settings. Without an official CVSS score, the overall severity remains indeterminate, but the potential for unintended configuration changes suggests a moderate to high risk for impacted devices.