CVEvulnerability

CVE-2026-107052

Published 2026-10-29 Modified 2026-10-29 Official page ↗

Status: Received
Published: 2026-10-29
Last modified: 2026-10-29
Assigner: [email protected]

Description

Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path.

References

https://bitbucket.org/projectmaxs/maxs bitbucket.org
https://f-droid.org/packages/org.projectmaxs.module.fileread/ f-droid.org
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107052.md github.com