CVE-2026-107041
Description
A flaw was found in Island. Insecure permission controls in the FeatureActionActivity component allow an unauthorized attacker to arbitrarily force the device to freeze. This vulnerability leads to a Denial of Service (DoS), rendering the device unresponsive.
Statement
This vulnerability has been rated as having a Moderate impact because an unprivileged local attacker can trigger a device freeze leading to denial of service, though it does not compromise data confidentiality or integrity. Oasis Feng Island is an application designed exclusively for the Android mobile operating system and is not distributed or supported in any Red Hat enterprise offerings. Consequently, Red Hat products are not affected by this flaw.
Understanding the Weakness (CWE)
Integrity,Confidentiality,Availability,Access Control,Other
Technical Impact: Gain Privileges or Assume Identity; Read Application Data; Modify Application Data; Execute Unauthorized Code or Commands; Other
Exposing critical functionality essentially provides an attacker with the privilege level of the exposed functionality. The consequences may vary depending on the behavior of the exposed method. Typically, this could result in the modification or exposure of sensitive data or possibly even execution of arbitrary code.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
