PT-2026-103606 · Meta · Horizon Os
CVE-2026-92173
·
Published
2026-09-30
·
Updated
2026-10-01
CVSS v3.1
9.1
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Meta Horizon OS versions prior to 74.0.0.878.1682
Description
An issue exists where the
MediaSyncJobReceiver can be induced to send a privileged PendingIntent containing a com.oculus.vrshell CallerIdentity to an arbitrary application that is listening via NotificationListenerService. This allows the receiving application to impersonate the com.oculus.vrshell package and other packages signed with the same key when interacting with any OS endpoint that utilizes CallerIdentity authentication.Recommendations
Update Meta Horizon OS to version 74.0.0.878.1682 or later.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Horizon Os