In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
History

Wed, 09 Sep 2026 21:30:00 +0000

Type Values Removed Values Added
Title Android AppFuseBridge Information Disclosure via Missing Permission Check
Weaknesses CWE-200
CWE-284

Tue, 08 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Description In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: google_android

Published: 2026-09-08T18:05:37.046Z

Updated: 2026-09-08T18:05:37.046Z

Reserved: 2026-05-12T17:34:26.824Z

Link: CVE-2026-45521

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-08T19:17:57.723

Modified: 2026-09-08T19:21:26.860

Link: CVE-2026-45521

cve-icon Redhat

No data.