CVE-2026-107035
Description
A flaw was found in OMN. Insecure permission handling allows an unauthorized attacker to arbitrarily write content into another user's private storage using a crafted payload. This issue could lead to unauthorized data modification and compromise the integrity of sensitive user files.
Statement
This vulnerability has been rated as Moderate severity because exploitation is restricted to altering local application storage without granting elevated administrative privileges or arbitrary code execution. Additionally, OMN is an Android-specific mobile note application that is not distributed, packaged, or supported within Red Hat products. Therefore, Red Hat enterprise environments are not impacted by this flaw.
Understanding the Weakness (CWE)
Confidentiality,Integrity
Technical Impact: Read Application Data; Modify Application Data
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
