Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-92172

Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent including a com.oculus.horizon CallerIdentity to an arbitrary appli

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Meta

Description

Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent including a com.oculus.horizon CallerIdentity to an arbitrary application registering for com.oculus.systemactivities.SCREENSHOT via a broadcast receiver. That would allow the application to impersonate the com.oculus.horizon package towards any endpoint within the OS that uses CallerIdentity authentication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Meta Platforms, Inc Meta Horizon OS

Default version status: unaffected

  • v0.0.0.0.0 to < v66.0.0.733.524affected

References