Vulnerability in Meta Horizon OS's OVRMediaService Affects CallerIdentity Authentication
CVE-2026-92172

8.8HIGH

Key Information:

Vendor

Meta Platforms, Inc

Status
Meta Horizon Os
Vendor
CVE Published:
30 September 2026

What is CVE-2026-92172?

An issue in Meta Horizon OS's OVRMediaService allows unauthorized applications to receive privileged PendingIntent information, posing a risk of impersonation. This vulnerability could enable malicious applications to access CallerIdentity authentication mechanisms within the operating system, creating potential security threats for users.

Affected Version(s)

Meta Horizon OS v0.0.0.0.0

References

https://www.facebook.com/security/advisories/cve-2026-92172
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.