high7.5

CVE-2026-107042

Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized attackers to move or overwrite files in another user's priva…

Impact

Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized attackers to move or overwrite files in another user's private storage via supplying a crafted content URI.

Affected products

Product	Affected versions
N/A	Version n/a

Weakness classification

CWE-732

References

NVD record
CVE.org record
GitHub advisory
https://f-droid.org/packages/app.usp/
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107042.md