CVE-2026-107052
High 7.5
Description
Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path.
Metrics
- CVSS 3.1
-
7.5 (HIGH)
Score source: CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - EPSS — exploit probability
- 0% (percentile: 29) as of 2 November 2026
- CWE
- CWE-276