PT-2026-132384

CVE-2026-107052

·

Published

2026-10-29

·

Updated

2026-10-29

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-276: Incorrect Default Permissions
Related identifiers
CVE-2026-107052
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com