Pdf Reader App
Monthly
Path traversal in Reader Tools PDF Reader App 98.8 on Android permits a local low-privileged attacker to manipulate the `_display_name` parameter supplied via a deep link to the `ActSplashNew.handleDeeplink` function, enabling file reads or writes outside the application's intended sandbox. The affected CPE (`cpe:2.3:a:reader_tools:pdf_reader_app`) covers version 98.8 on Android; the vendor did not respond to the coordinated disclosure, and no patch has been released. A public proof-of-concept exploit exists, but real-world impact is bounded by the local-only attack vector and low individual component impacts.
Path traversal in Reader Tools PDF Reader App 98.8 on Android permits a local low-privileged attacker to manipulate the `_display_name` parameter supplied via a deep link to the `ActSplashNew.handleDeeplink` function, enabling file reads or writes outside the application's intended sandbox. The affected CPE (`cpe:2.3:a:reader_tools:pdf_reader_app`) covers version 98.8 on Android; the vendor did not respond to the coordinated disclosure, and no patch has been released. A public proof-of-concept exploit exists, but real-world impact is bounded by the local-only attack vector and low individual component impacts.