This vulnerability affects the WebView URL handler component of the Groww Stock, Mutual Fund, Gold App on Android (up to version 20260805). Improper authorization in handling custom URL schemes could allow an attacker with physical access to the device to exploit the flaw. The attack complexity is high, and no privileges beyond limited user rights are required. The vulnerability has a low CVSS score of 1.0, indicating minimal impact and difficulty in exploitation. No official remediation or patch has been disclosed by the vendor as of the publication date.

The vulnerability could allow an attacker with physical access to the device to misuse the custom URL scheme handler due to improper authorization. However, the low CVSS score and high attack complexity suggest limited impact and difficulty in exploitation. There is no indication of privilege escalation, denial of service, or data confidentiality impact beyond the described authorization issue.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should limit physical access to their devices and avoid interacting with untrusted custom URL schemes within the app.