CVE-2026-108544: Lippu Docx Reader Office Viewer App path traversal
A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument displayname leads to path traversal. The attack may be performed from remote.
Affected Software
Event History
Frequently Asked Questions
Which versions are affected?
The vulnerability affects Lippu Docx Reader Office Viewer App on Android through version 1.4.5. The provided data does not identify a fixed version.
Does exploitation require prior access or user interaction?
The supplied CVSS vector indicates network attack access, low attack complexity, no privileges required, and user interaction required. The vulnerability is described as remotely exploitable.
What impact could successful exploitation have?
Successful path traversal through the _display_name argument may affect confidentiality, integrity, and availability at low impact levels according to the supplied CVSS vector.