What is GHSA-c87v-83c9-mwgp?

GHSA-c87v-83c9-mwgp is a security advisory published by GitHub Security Advisories with Critical severity. In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access...

Which CVE IDs does GHSA-c87v-83c9-mwgp cover?

GHSA-c87v-83c9-mwgp covers the following CVE IDs: CVE-2026-0082. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-c87v-83c9-mwgp?

GHSA-c87v-83c9-mwgp has a CVSS v3 base score of 7.8, published by GitHub Security Advisories.

GHSA-c87v-83c9-mwgpCriticalCVSS 7.8

In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access...

Vendor

GitHub Security Advisories

Published

June 17, 2026

Last Modified

June 17, 2026

🔗 CVE IDs covered (1)

CVE-2026-0082 →

📋 Description

In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-0082
https://source.android.com/docs/security/bulletin/android-17
https://github.com/advisories/GHSA-c87v-83c9-mwgp