Vulnerability Description
Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://f-droid.org/packages/me.alexghr.bulkshare.android.app2/
- https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026
- https://github.com/alexghr/bulkshare
- https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026
FAQ
What is CVE-2026-107032?
CVE-2026-107032 is a vulnerability with a CVSS score of 9.1 (CRITICAL). Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow.
How severe is CVE-2026-107032?
CVE-2026-107032 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-107032?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.