CVE-2026-107153: fallo de gravedad alta en Rakuten BIGs
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7epss 0.2%
Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) functionality. With physical access to the affected device, a crafted system image may be installed.
CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Rakuten Mobile, Inc. · Rakuten BIGsRakuten Mobile, Inc. · Rakuten HandRakuten Mobile, Inc. · Rakuten Hand 5GRakuten Mobile, Inc. · Rakuten MiniReferencias
https://jvn.jp/en/jp/JVN47427200/https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-big-s/support/index.htmlhttps://network.mobile.rakuten.co.jp/product/smartphone/rakuten-hand-5g/support/index.htmlhttps://network.mobile.rakuten.co.jp/product/smartphone/rakuten-hand/support/index.htmlhttps://network.mobile.rakuten.co.jp/product/smartphone/rakuten-mini/support/index.html