Live › vulnerability › CVE-2026-107052
The MAXS Module FileRead component, version code 27, exposes its AIDL interface without proper permission checks. An unauthorized attacker can read arbitrary files outside the app sandbox by supplying an absolute path.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 17:26 UTC. All times on this page are UTC.
Devices or apps that bundle the ProjectMAXS MAXS Module FileRead component at versionCode 27. The sources do not say which products ship it or whether a fixed version exists.
No product ranges from the sources yet.
versionCode 27No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path.
This page as .md · .json · in your agent: get_signal("CVE-2026-107052")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.