CVE-2024-26132

Element Android is an Android Matrix Client. A third-party malicious application installed on the same phone can force Element Android, version 0.91.0 through 1.6.12, to share files stored under the files directory in the application's private data directory to an arbitrary room. The impact of th...

CVE-2025-27606

CVE-2025-27606 – Element Android PIN autologout bypass . Element Android (Android Matrix Client) up to version 1.6.32 can fail to log out after a user-entered PIN is wrong beyond the configured limit, enabling a local attacker with physical access to guess the PIN. The issue is fixed in version 1...