CVE Watch29 oct 2026

CVE-2026-107052

Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily r

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 29 oct 2026 · Última mod.: 29 oct 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path.

Referencias oficiales

bitbucket.orghttps://bitbucket.org/projectmaxs/maxs
f-droid.orghttps://f-droid.org/packages/org.projectmaxs.module.fileread/
github.comhttps://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107052.md

CVEs relacionados

Sin CVEs relacionados por CWE o producto.