High · 7.5 CVE-2026-107047 EUVD-2026-113266GHSA-q747-qwr6-p3vq

Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechani…

Published Oct 29, 2026 · Updated Oct 29, 2026 · Assigned by mitre

Description

Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanism and log data.

References

https://f-droid.org/packages/com.mendhak.gpslogger/
https://github.com/mendhak/gpslogger
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107047.md