CVE-2026-28638

CVE-2026-28638 affects the Media Provider component of Android (specifically XmpDataParser.java ), where a logic error causes improper data sanitization (CWE-200). This results in local information disclosure of media memory with no additional execution privileges and no user interaction required...