Vulnerability Description
Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts.
References
- https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026
- https://github.com/FossifyOrg/Contacts
- https://github.com/kanytu/Simple-Contacts/issues/628
FAQ
What is CVE-2026-107016?
CVE-2026-107016 is a documented vulnerability. Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts.
How severe is CVE-2026-107016?
CVSS scoring is not yet available for CVE-2026-107016. Check NVD for updates.
Is there a patch for CVE-2026-107016?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.