CVE-2026-116633

Lenovo arbitrary file write via exported Android component

medium · 6.9

Fix listed

Lenovo Idea Tab Pro TB373FU

Published Nov 11, 2026, 16:16 UTC

Description

A potential vulnerability was reported in some Lenovo Tablets that could allow a third-party application to perform an arbitrary file write with elevated privileges.

Reported fixed versions

17.5.10.107, 17.0.10.324, 17.0.10.318, TBD, 18.5.10.037

Official CVE record View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.