ProjectMAXS MAXS Module FileRead: Path traversal via absolute path in AIDL interface
The AIDL interface of the MAXS Module FileRead Android add-on (versionCode 27) has insecure permissions. An unauthorized attacker can read arbitrary files outside the app sandbox by supplying an absolute path. The CVSS 3.1 base score of 7.5 comes from NVD; VulDB rates the issue at 5.3 and limits the impact to confidentiality, and the required access path is unclear.
ProjectMAXS · MAXS Module FileRead
