MinorCritical vulnerability
CVE-2026-107153 (CVSS 7.0)
NVD · officialPublished Oct 14, 2026Risk 23/100
Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) functionality. With physical access to the affected device, a crafted system image may be installed.
Technical details
CVSS
7.0
AV:PhysicalAC:LowPR:LowUI:None
Evidence and sources
This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.
Open primary source