CVE-2026-77875

— UNSCORED

Published 2026-09-19 · Updated 2026-09-22

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

The application protects access through its calculator-style vault passcode, but the stored data is not bound to that authentication boundary. A local actor who can access shared external storage, such as through an authorized non-root ADB shell or another local file-reading context with suitable storage access, can copy the SQLite database and media files directly without entering the vault passcode.

Weaknesses

CWE-922

All references

https://fluidattacks.com/advisories/grin
https://play.google.com/store/apps/details?id=com.macymind.calculatorlock

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

UNSCOREDCVE-2026-84283

Related by shared AI tags and CWE weakness class. Browse the full archive.