CVE-2026-107052

no score yet

Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path.

Published: 2026-10-29
Modified: 2026-10-29
Record from: the NVD, synced 2026-10-29

References

https://bitbucket.org/projectmaxs/maxs
https://f-droid.org/packages/org.projectmaxs.module.fileread/
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107052.md

Check your stack JSON