Location Sender (V2.1.0) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/location-sender-v2.1.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 29 Oct 2026 23:08:23 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgBulk Share: Location Sender insecure component permissions (CVE-2026-107032)https://feed.craftedsignal.io/briefs/2026-10-bulk-share-location-sender/Thu, 29 Oct 2026 23:08:23 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-bulk-share-location-sender/Insecure permissions in Bulk Share: Location Sender v2.1.0 (versionCode 5) allow unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow.CVE-2026-107032 identifies an insecure permission configuration in Bulk Share: Location Sender v2.1.0 (versionCode 5). The application exports a component that allows unauthorized attackers to invoke it, resulting in arbitrary data access and control of data flow.

Impact

The vulnerability has a CVSS v3.1 Base Score of 9.1.

]]>criticaladvisory