Rolling Changelog
This article summarizes rolling releases made for acceptance testing and quality assurance.
NEXT.MC03.20261030.D0
Reviews available on 2026-10-30. Release available 2026-10-31.
- NEXT.MC03.20261030.U0 user variant
- NEXT.MC03.20261030.D0 userdebug variant
T5891 (bug-fix)
- Fixed an issue where installed eSIM profiles disappeared from the eSIM app after restarting it.
- Improved eSIM profile detection and synchronization after reloading the app or clearing its storage.
- Improved the Erase eSIMs functionality to ensure installed profiles are removed correctly.
T5878 (bug-fix)
- Resolved eSIM app crashes when enabling or disabling eSIM profiles through Settings or the eSIM app.
T5899 (bug-fix)
- Fixed an issue that prevented reinstalling a deleted eSIM using its activation code when multiple eSIM profiles were present.
T5884 (enhancement)
- Refined the lock screen fingerprint illumination animation for a cleaner look, removing the blue effect.
T5883 (enhancement)
- Updated the lock screen fingerprint icon to align with SODA design guidelines, replacing the old blue icon version.
T5885 (enhancement)
- Refined the fingerprint registration progress animation during setup in Settings to align with SODA design specifications.
T5886 (enhancement)
- Updated the bottom fingerprint indicator icon in Settings to align with the SODA design guidelines.
T5875 (enhancement)
- Updated Vault app eligibility in Punkt Launcher to display only Vault-approved apps installed through Aphy Apps.
T5731 (enhancement)
- Set Touch feedback to off by default under Settings > Sound & vibration > Vibration & haptics.
- Fixed an issue where Touch feedback vibration was not working as expected.
T5817 (enhancement)
- Improved Location indicator behavior to avoid unnecessary notifications from system telephony services.
T5872 (enhancement)
- Updated Clock app colors and backgrounds to align with black-and-white soda design guidelines, replacing blue and red styling where applicable.
T5871 (enhancement)
- Updated the font family in the Clock app to match SODA design guidelines.
- Applied consistent typography across Alarm, Clock, Timer, and Stopwatch screens.
T5890 (enhancement)
- Added a "Skip" option during the device onboarding process, allowing users to bypass signing in or creating an Aphy account.
NEXT.MC03.20261016.D0
Reviews available on 2026-10-15. Release available 2026-10-16.
- NEXT.MC03.20261016.U0 user variant
- NEXT.MC03.20261016.D0 userdebug variant
T5806 (bug-fix)
- Improved the WildWeb screen layout to prevent content from overlapping with the top status bar.
- Improved the Vault screen layout to prevent content from overlapping with the bottom navigation bar.
T5841 (enhancement)
- A valid subscription is no longer required to install or update apps through the App Store.
T5824 (bug-fix)
- Fixed an issue where the cellular network remained active and SMS messages could be received while Airplane Mode was enabled.
T5802 (bug-fix)
- Fixed an issue where the cellular network failed to reconnect after the device started in Airplane Mode.
T5803 (bug-fix)
- Fixed an issue where the Internet tile appeared active in Quick Settings after enabling Airplane Mode.
T5856 (enhancement)
- Fixed an issue where a fake pop-up appeared when opening Settings in Calculator app.
T5835 (enhancement)
- Resolved an issue where a white circle appeared on the lock screen after setting up a fingerprint and restarting the device.
T5834 (enhancement)
- Corrected the display of the fingerprint icon on the lock screen when no fingerprint was set up.
T5838 (enhancement)
- The fingerprint icon now disappears from the lock screen when all saved fingerprints are removed.
T5846 (enhancement)
- Resolved an issue where the "Set your SIM preferences" popup repeatedly appeared when opening Recent Apps after re-enabling an eSIM.
T5868 (enhancement)
- Removed eSIM profiles now disappear from Settings without requiring a device restart.
T5853 (bug-fix)
- Resolved an issue where disabling an eSIM caused it to disappear from Settings, preventing users from re-enabling it or adding a new eSIM.
T5784 (enhancement)
- Upgraded HeliBoard to the version 4.1.
NEXT.MC03.20261002.D0
Reviews available on 2026-10-01. Release available 2026-10-02.
- NEXT.MC03.20261002.U0.7z user variant
- NEXT.MC03.20261002.D0.7z userdebug variant
T5816 (bug-fix)
- Status bar icons now remain visible when opening the Recent Apps screen from WildWeb using the bottom-right navigation button.
T5823 (enhancement)
- Update Vanadium
T5805 (bug-fix)
- Prevent the system updater from wrongfully locking itself out from checking for updates
T5801 (enhancement)
- Include Seedvault for backing up the phone's contents
NEXT.MC03.20260918.D0
Reviews available on 2026-09-17. Release available 2026-09-18.
- NEXT.MC03.20260918.U0.7z user variant
- NEXT.MC03.20260918.D0.7z userdebug variant
T5799 (bug-fix)
- Resolved red lines appearing under the date and time on the Vault screen.
T5809 (bug-fix)
- Weather is no longer accessible by tapping the time on the Vault screen.
T5812 (enhancement)
- App icons now remain visible in the Dock bar on the WildWeb screen when the display or font size is increased in Settings.
T5811 (bug-fix)
- Improved app installation stability in the Aphy Apps Store when Danish is selected as the language.
T5545 (enhancement)
- SIM Toolkit app icon updated.
Update Platform Security Patch to 2026-09-05
| CVE | Type | Severity | Component |
|---|---|---|---|
| CVE-2026-28617 | DoS | High | packages/modules/Wifi |
| CVE-2026-33636 | EoP | Critical | external/libpng |
| CVE-2026-45527 | DoS | High | frameworks/av |
| CVE-2026-27280 | EoP | Critical | external/dng_sdk |
| CVE-2026-28609 | RCE | High | frameworks/av |
| CVE-2026-28653 | DoS | Critical | system/nfc |
| CVE-2026-49879 | EoP | Critical | system/nfc |
| CVE-2026-28639 | RCE | Critical | system/nfc |
| CVE-2026-49882 | RCE | Critical | system/nfc |
| CVE-2026-49884 | EoP | Critical | system/nfc |
| CVE-2026-28583 | EoP | High | system/media |
| CVE-2026-0065 | EoP | High | frameworks/base |
| CVE-2026-28644 | EoP | High | frameworks/base |
| CVE-2026-28650 | EoP | High | frameworks/base |
| CVE-2026-28642 | EoP | High | frameworks/base |
| CVE-2026-28638 | ID | High | packages/providers/MediaProvider |
| CVE-2026-28671 | ID | High | packages/providers/MediaProvider |
| CVE-2026-45517 | ID | High | packages/providers/MediaProvider |
| CVE-2026-45519 | ID | High | packages/providers/MediaProvider |
| CVE-2026-45525 | ID | High | packages/providers/MediaProvider |
| CVE-2026-28619 | N/A | N/A | packages/providers/MediaProvider |
| CVE-2026-28604 | RCE | Critical | packages/modules/adb |
| CVE-2026-49914 | N/A | N/A | frameworks/av |
| CVE-2026-28591 | N/A | N/A | packages/modules/Bluetooth |
| CVE-2026-28591 | N/A | N/A | vendor/mediatek/proprietary/packages/modules/Bluetooth |
| CVE-2026-28590 | EoP | Critical | packages/modules/Bluetooth |
| CVE-2026-0097 | N/A | N/A | vendor/mediatek/proprietary/packages/modules/Bluetooth |
| CVE-2026-28590 | EoP | Critical | vendor/mediatek/proprietary/packages/modules/Bluetooth |
| CVE-2026-55294 | EoP | Critical | external/libhevc |
| CVE-2026-28585 | EoP | Critical | packages/services/Telephony/ |
| CVE-2026-28585 | EoP | Critical | vendor/mediatek/proprietary/packages/services/Telephony |
| CVE-2026-55290 | ID | High | frameworks/base |
| CVE-2026-49919 | RCE | Critical | external/freetype |
| CVE-2026-58822 | RCE | Critical | external/freetype |
| CVE-2026-28619 | N/A | N/A | packages/providers/DownloadProvider |
| CVE-2026-45515 | EoP | Critical | packages/modules/Bluetooth |
| CVE-2026-45515 | EoP | Critical | vendor/mediatek/proprietary/packages/modules/Bluetooth |
| CVE-2026-58839 | EoP | High | system/incremental_delivery |
| CVE-2026-49913 | EoP | High | hardware/interfaces |
| CVE-2026-28668 | EoP | High | bionic |
| CVE-2026-28658 | EoP | High | frameworks/base |
| CVE-2026-45518 | EoP | Critical | frameworks/base |
| CVE-2026-45518 | EoP | Critical | packages/providers/ContactsProvider |
| CVE-2026-45520 | EoP | Critical | packages/apps/Settings |
| CVE-2026-45520 | EoP | Critical | vendor/mediatek/proprietary/packages/apps/MtkSettings |
| CVE-2026-28664 | EoP | High | art |
| CVE-2026-28581 | ID | High | packages/services/Telecomm |
| CVE-2026-28581 | ID | High | packages/services/Telecomm |
| CVE-2026-28603 | EoP | Critical | packages/apps/Settings |
| CVE-2026-28603 | EoP | Critical | vendor/mediatek/proprietary/packages/apps/MtkSettings |
| CVE-2026-28619 | EoP | Critical | frameworks/base |
| CVE-2026-28588 | EoP | Critical | frameworks/base |
| CVE-2026-28649 | EoP | Critical | packages/apps/Settings |
| CVE-2026-28649 | EoP | Critical | vendor/mediatek/proprietary/packages/apps/MtkSettings |
| CVE-2026-45528 | EoP | Critical | frameworks/base |
| CVE-2026-45521 | ID | Critical | frameworks/base |
| CVE-2026-28666 | EoP | Critical | frameworks/base |
| CVE-2026-28656 | EoP | Critical | frameworks/base |
| CVE-2026-28656 | EoP | Critical | packages/apps/Settings |
| CVE-2026-28656 | EoP | Critical | vendor/mediatek/proprietary/packages/apps/MtkSettings |
| CVE-2026-28600 | EoP | Critical | packages/apps/Settings |
| CVE-2026-28600 | EoP | Critical | vendor/mediatek/proprietary/packages/apps/MtkSettings |
| CVE-2025-48564 | EoP | High | frameworks/base |
| CVE-2025-48565 | EoP | High | frameworks/base |
| CVE-2025-48566 | EoP | High | frameworks/base |
| CVE-2026-28631 | EoP | High | frameworks/base |
| CVE-2025-48564 | EoP | High | packages/modules/IntentResolver |
| CVE-2025-48565 | EoP | High | packages/modules/IntentResolver |
| CVE-2026-28632 | ID | High | packages/modules/IntentResolver |
| CVE-2026-49895 | ID | High | external/wpa_supplicant_8 |
| CVE-2026-49921 | RCE | Critical | packages/modules/Bluetooth |
| CVE-2026-49921 | RCE | Critical | vendor/mediatek/proprietary/packages/modules/Bluetooth |
| CVE-2026-58945 | ID | Critical | packages/modules/Bluetooth |
| CVE-2026-58945 | ID | Critical | vendor/mediatek/proprietary/packages/modules/Bluetooth |
| CVE-2026-45514 | EoP | Critical | frameworks/base |
| CVE-2026-28656 | EoP | High | frameworks/base |
| CVE-2026-28602 | ID | High | frameworks/base |
| CVE-2026-28614 | EoP | High | frameworks/base |
| CVE-2026-28614 | EoP | High | vendor/mediatek/proprietary/packages/apps/SystemUI |
| CVE-2026-58874 | EoP | High | frameworks/base |
| CVE-2026-58874 | EoP | High | frameworks/opt/telephony |
| CVE-2026-55256 | DoS | Critical | development |
| CVE-2026-55256 | DoS | Critical | frameworks/base |
| CVE-2026-45529 | EoP | High | packages/providers/TelephonyProvider |
| CVE-2026-45529 | EoP | High | vendor/mediatek/proprietary/packages/providers/TelephonyProvider |
| CVE-2026-49932 | DoS | Critical | frameworks/base |
| CVE-2026-45531 | EoP | Critical | external/exfatprogs |
| CVE-2026-45531 | EoP | Critical | external/exfatprogs |
| CVE-2026-28606 | EoP | High | packages/modules/Bluetooth |
| CVE-2026-28606 | EoP | High | vendor/mediatek/proprietary/packages/modules/Bluetooth |
| CVE-2026-28607 | EoP | High | frameworks/base |
| CVE-2026-28611 | EoP | High | packages/apps/Nfc |
| CVE-2026-28655 | EoP | High | frameworks/base |
| CVE-2026-28655 | EoP | High | frameworks/base |
| CVE-2026-28660 | ID | High | frameworks/base |
| CVE-2026-28634 | EoP | High | packages/services/Telephony |
| CVE-2026-28634 | EoP | High | vendor/mediatek/proprietary/packages/services/Telephony |
| CVE-2026-28635 | EoP | High | frameworks/av |
| CVE-2026-28635 | EoP | High | frameworks/av |
| CVE-2026-28613 | EoP | Critical | packages/apps/TV |
| CVE-2026-28633 | DoS | High | frameworks/base |
| CVE-2026-28626 | EoP | High | packages/apps/TV |
| CVE-2026-28582 | ID | High | packages/apps/Settings |
| CVE-2026-28582 | ID | High | vendor/mediatek/proprietary/packages/apps/MtkSettings |
| CVE-2026-28596 | DoS | High | frameworks/base |
| CVE-2026-28593 | EoP | High | packages/apps/TV |
| CVE-2026-20464 | N/A | Critical | vendor/mediatek/proprietary/hardware/vcodec |
| CVE-2026-20464 | N/A | Critical | vendor/mediatek/proprietary/tinysys/vcp_sp_imgs/mt6878 |
| CVE-2026-20464 | N/A | Critical | vendor/mediatek/proprietary/tinysys/vcp_tb_imgs/mt6878 |
| CVE-2026-20502 | N/A | Critical | vendor/mediatek/proprietary/hardware/libc2/video |
| CVE-2026-20501 | N/A | Critical | vendor/mediatek/proprietary/hardware/libc2/video |
NEXT.MC03.20260822.D0
Reviews available on 2026-08-20. Originally targeted for release on 2026-08-21. Released on 2026-08-23.
- NEXT.MC03.20260822.U0.7z user variant
- NEXT.MC03.20260822.D0.7z userdebug variant
T5795 (bug-fix)
- Fixed a crash that could occur when enabling Google Services in the Apps app.
T5602 (enhancement)
- Removed "Configure Play Store updates" menu option from the Sandboxed Google Play screen in user builds.
T5686 (bug-fix)
- Fixed incorrect phone number association between SIM profiles after disabling a physical SIM in the Settings.
T5774 (enhancement)
- Enhanced the low-battery screen experience when attempting to power on a fully discharged device.
T5772 (enhancement)
- Improved Settings by ensuring the HeliBoard keyboard is selected correctly after a language change.
T5785 (bug-fix)
- Resolved an issue where a "Subscription Expired" message could appear when installing apps or enabling Google Services in the Apps Store.
T5763 (enhancement)
- Added an Erase eSIM option, allowing users to remove an eSIM from Settings > Network & Internet > SIMs > [Activated eSIM] > Erase eSIM.
T5742 (enhancement)
- Enhanced the charging experience when powering on from a fully drained battery.
T5773 (enhancement)
- Removed the HeliBoard app icon from the App Tray.
NEXT.MC03.20260802.D0
Reviews available on 2026-07-30.
Originally targeted for release on 2026-07-31. Released on 2026-08-02.
- NEXT.MC03.20260802.U0.7z user variant
- NEXT.MC03.20260802.D0.7z userdebug variant
T5771 (bug-fix)
Improved onboarding by ensuring the HeliBoard keyboard is displayed correctly after a language change.