Android Boot Vulnerability in Rakuten Mobile Smartphones
CVE-2026-107153
7HIGH
What is CVE-2026-107153?
Multiple smartphones from Rakuten Mobile, Inc. are compromised due to the use of AOSP test keys in their Android Verified Boot (AVB) systems. This flaw allows an adversary with physical access to the device to install a malicious system image, thereby bypassing security measures designed to ensure the integrity of the device's operating system. It is crucial for users to implement strict security measures to prevent unauthorized physical access to their devices.
Affected Version(s)
Rakuten BIGs all versions
Rakuten Hand all versions
Rakuten Hand 5G all versions
References
CVSS V4
Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
CVSS V3.0
Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved