CVE-2026-107027

EUVD-2026-113176
Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
UNKNOWN
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
References
https://f-droid.org/packages/cn.ac.lz233.tarnhelm/
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107027.md
https://github.com/lz233/Tarnhelm