CVE-2026-28671

In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28671

CVE-2026-28671 is a race condition in the updateInternal method of MediaProvider.java within Android's Media Provider Project Mainline component. The flaw allows local information disclosure of file contents without requiring additional privileges or user interaction. It affects Android 14, 15, a...

EUVD-2026-73996

In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28671

In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...