Live › vulnerability › CVE-2026-107041
The FeatureActionActivity component of Oasis Feng's Island app (versionCode 51801) has insecure permissions, so any app or unauthorized party can trigger it. An attacker can force the device to freeze, a denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Only installs of the Island app at versionCode 51801 are described; the sources do not say which versions are fixed. Devices without Island installed are not affected by this entry.
No product ranges from the sources yet.
51801 (unknown how to read it from the sources)No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrarily force a freeze in the device, leading to a Denial of Service (DoS).
This page as .md · .json · in your agent: get_signal("CVE-2026-107041")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.