CVE-2026-107153
HIGH
7,0
Source: [email protected]
Attack Vector: physical
Attack Complexity: low
Privileges Required: low
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
MEDIUM
6,6
Source: [email protected]
Attack Vector: physical
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
Description
AI Translation Available
Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) functionality. With physical access to the affected device, a crafted system image may be installed.
1391
Use of Weak Credentials
IncompleteCommon Consequences
Security Scopes Affected:
Access Control
Potential Impacts:
Bypass Protection Mechanism
Applicable Platforms
Technologies:
ICS/OT, Not Technology-Specific
https://jvn.jp/en/jp/JVN47427200/
https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-big-s/support/i…
https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-hand-5g/support…
https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-hand/support/in…
https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-mini/support/in…