{"id":"CVE-2026-107153","title":"Multiple smartphones provided by Rakuten Mobile, Inc","summary":"Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) functionality. With physical access to the affected device, a crafted system image may be installed.","severity":"medium","cvss":6.6,"cvssVector":"CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-1391"],"published":"2026-10-14","updated":"2026-10-14","sourceUpdated":"2026-10-14T06:17:05.390","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-107153","references":[{"url":"https://jvn.jp/en/jp/JVN47427200/","label":"vultures@jpcert.or.jp"},{"url":"https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-big-s/support/index.html","label":"vultures@jpcert.or.jp"},{"url":"https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-hand-5g/support/index.html","label":"vultures@jpcert.or.jp"},{"url":"https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-hand/support/index.html","label":"vultures@jpcert.or.jp"},{"url":"https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-mini/support/index.html","label":"vultures@jpcert.or.jp"}],"tags":["nvd"],"ingestedAt":"2026-10-14T07:21:04.828Z","slug":"CVE-2026-107153","body":"## Overview\n\nMultiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) functionality. With physical access to the affected device, a crafted system image may be installed.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":36.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}