high7.5

CVE-2026-107047

Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanism and log data.

Impact

Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanism and log data.

Affected products

Product	Affected versions
N/A	Version n/a

Weakness classification

CWE-732

References

NVD record
CVE.org record
GitHub advisory
https://f-droid.org/packages/com.mendhak.gpslogger/
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107047.md
https://github.com/mendhak/gpslogger