CVE-2026-107027

UNKNOWN NVD

CVSS Score 0

Severity UNKNOWN

Published Oct 29, 2026

Vendor unknown

Description

Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.

References

https://f-droid.org/packages/cn.ac.lz233.tarnhelm/
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107027.md
https://github.com/lz233/Tarnhelm