CyberRota Analysis
AI-GeneratedThe Reader Tools PDF Reader App version 98.8 on Android is vulnerable due to a path traversal issue in the ActSplashNew.handleDeeplink function, which can be exploited locally by manipulating the _display_name argument. This vulnerability could allow an attacker to access unauthorized files on the device. Android users and organizations relying on this app should prioritize patching or mitigating this risk, especially since the exploit has been publicly disclosed and the vendor has not responded to the issue.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security vulnerability has been detected in Reader Tools PDF Reader App 98.8 on Android. The affected element is the function ActSplashNew.handleDeeplink of the component File Handler. The manipulation of the argument _display_name leads to path traversal. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.