More information about this CVE will likely be available in a few days

Description

Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.

Related CPE's

Could not find any relations

References

https://f-droid.org/packages/cn.ac.lz233.tarnhelm/

https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107027.md

https://github.com/lz233/Tarnhelm

Weaknesses

Could not find any weaknesses

CVSS impact metrics

Could not find any metrics

Information

Source identifier

[email protected]

Vulnerability status

Deferred

Published

2026-10-29T16:17:48.503Z

14 hours ago

Last modified

2026-10-29T16:30:07.917Z

14 hours ago