Live › vulnerability › CVE-2026-107042
USP Ultimate Screenshot Painter, an Android app, builds on insecure permissions that let an unauthorized app or attacker move or overwrite files in another user's private storage. The attack works by supplying a crafted content URI to the app.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Users of USP Ultimate Screenshot Painter versionCode 240213.009 on Android are the affected group according to the description. The sources do not say which other versions, configurations, or devices are affected, or whether a fixed version exists.
No product ranges from the sources yet.
240213.009 (unknown whether other versions are affected)No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized attackers to move or overwrite files in another user's private storage via supplying a crafted content URI.
This page as .md · .json · in your agent: get_signal("CVE-2026-107042")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.