Unrated severityNVD Advisory· Published Oct 29, 2026

CVE-2026-107052

Description

Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path.

Patches

Vulnerability mechanics

References

f-droid.org/packages/org.projectmaxs.module.fileread/nvd
github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107052.mdnvd

News mentions

No linked articles in our index yet.