HIGH 7.5 NVD
CVE-2026-107042
Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized attackers to move or overwrite files in another user's privat
Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized attackers to move or overwrite files in another user's private storage via supplying a crafted content URI.
References
- https://f-droid.org/packages/app.usp/
- https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107042.md
- https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107042.md
This high severity vulnerability with a CVSS score of 7.5 was published on 2026-10-29 via NVD.
vulnfeed aggregates 16884 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.