Launchpad.net

CVE 2019-13707

Insufficient validation of untrusted input in intents in Google Chrome on Android prior to 78.0.3904.70 allowed a local attacker to leak files via a crafted application.

See the CVE page on Mitre.org for more details.