Infinity for Reddit through 8.3.4 OAuth Login CSRF via LoginChromeCustomTabActivity

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-116072 · Microsoft / collected KEV context

cve-program · CVE-2026-116072

• https://github.com/Docile-Alligator/Infinity-For-Reddit/issues/1975
• https://github.com/Docile-Alligator/Infinity-For-Reddit
• https://github.com/Docile-Alligator/Infinity-For-Reddit/blob/v8.3.4/app/src/main/java/ml/docilealligator/infinityforreddit/activities/LoginChromeCustomTabActivity.java#L194-L205
• https://github.com/Docile-Alligator/Infinity-For-Reddit/blob/v8.3.4/app/src/main/java/ml/docilealligator/infinityforreddit/utils/APIUtils.java#L43
• https://github.com/Docile-Alligator/Infinity-For-Reddit/blob/v8.3.4/app/src/main/AndroidManifest.xml#L75-L92
• https://www.vulncheck.com/advisories/infinity-for-reddit-through-8.3.4-oauth-login-csrf-via-loginchromecustomtabactivity

• Infinity for Reddit through 8.3.4 OAuth Login CSRF via LoginChromeCustomTabActivity · Newly collected advisory · 25 Oct 2026