CVE-2026-107153

CVSS 7.0 (high) · published 2026-10-14

Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) functionality. With physical access to the affected device, a crafted system image may be installed.

Weakness: CWE-1391

Source: NVD CVE-2026-107153

References

• https://jvn.jp/en/jp/JVN47427200/
• https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-big-s/support/index.html
• https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-hand-5g/support/index.html
• https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-hand/support/index.html
• https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-mini/support/index.html

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.