CVE-2026-107056

no score yet

Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to inject crafted tracking data into the victim's location database via a crafted SEND message.

Published: 2026-10-29
Modified: 2026-10-29
Record from: the NVD, synced 2026-10-29

References

https://codeberg.org/OpenTracksApp/OpenTracks
https://f-droid.org/packages/de.dennisguse.opentracks/
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107056.md

Check your stack JSON