{"id":"CVE-2026-28621","kind":"vulnerability","aliases":["CVE-2026-28621"],"related":[],"title":"Android: missing permission check lets apps read ringtone data","description":"In getRingtone of RingtoneFactory.java, there is a possible unprivileged access risk due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"A missing permission check in the Android RingtoneFactory getRingtone code lets an unprivileged app access data it should not reach. An attacker gets local information disclosure, with no extra execution privileges and no user interaction needed.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","infrastructure","mobile"],"not_affected_if":["patched-android-build"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-02T20:17:42+00:00","first_seen_at":"2026-11-02T20:35:26+00:00","triaged_at":"2026-11-02T20:40:52+00:00","updated_at":"2026-11-02T20:40:52+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-02T20:40:52Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Android: missing permission check lets apps read ringtone data","impact":"low","summary":"A missing permission check in the Android RingtoneFactory getRingtone code lets an unprivileged app access data it should not reach. An attacker gets local information disclosure, with no extra execution privileges and no user interaction needed.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["android","mobile"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"local app reads information it lacks permission for","analyst_note":"","how_to_check":"unknown","plain_action":"Install the latest Android system update on your phone once your manufacturer releases it.","needs_analyst":false,"not_affected_if":["patched-android-build"],"who_is_affected":"Devices running an Android version affected by this flaw; the sources do not name the affected versions. Attack requires a malicious app already installed on the device, so exposure depends on what apps a person runs.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000604,"input_tokens":4096,"output_tokens":389,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':11A,14A '-28621':12A,15A 'access':33B,64C 'addit':81C 'android':1A,16B,25B 'app':6A,32B 'attack':40B 'check':4A,22B,71C 'code':28B 'could':73C 'cve':10A,13A 'data':9A,34B 'disclosur':44B,78C 'due':66C 'execut':48B,82C 'exploit':91C 'extra':47B 'get':41B 'getrington':27B,56C 'inform':43B,77C 'infrastructur':17B 'interact':53B,86C 'lead':74C 'let':5A,29B 'local':42B,76C 'miss':2A,20B,69C 'mobil':18B 'need':54B,84C,89C 'permiss':3A,21B,70C 'possibl':62C 'privileg':49B,83C 'reach':38B 'read':7A 'rington':8A 'ringtonefactori':26B 'ringtonefactory.java':58C 'risk':65C 'unprivileg':31B,63C 'user':52B,85C","nicknames":[],"mitigations":[],"who_affected":"Devices running an Android version affected by this flaw; the sources do not name the affected versions. Attack requires a malicious app already installed on the device, so exposure depends on what apps a person runs.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":"Install the latest Android system update on your phone once your manufacturer releases it.","pkeys":[],"ptokens":[],"labels":["android","infrastructure","mobile","unknown"],"first_public_at":"2026-11-02T20:17:42+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-28621","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28621","severity":null,"published_at":"2026-11-02T20:17:42+00:00","modified_at":"2026-11-02T20:17:42+00:00","first_seen_at":"2026-11-02T20:35:26+00:00","fetched_at":"2026-11-02T20:35:26+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}