CVE-2026-28671: Race Condition
Published Sep 8, 2026
·Updated
In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Event History
Sep 8, 2026
CVE Published
via MITRE·06:05 PM
Data Sourced
via MITRE·06:05 PM
DescriptionWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The issue can be exploited locally and does not require additional execution privileges. No user interaction is needed.
2
What is the potential impact of successful exploitation?
Successful exploitation may expose the contents of files, resulting in local information disclosure.