Skip to content
OpenAdvisories

Package · Ubuntu

apktool

3 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-39973 Public exploit

    Apktool: Path Traversal to Arbitrary File Write

    Apktool is a tool for reverse engineering Android APK files. In versions 3.0.0 and 3.0.1, a path traversal vulnerability in `brut/androlib/res/decoder/ResFileDecoder.java` allows a maliciously crafted APK to write arbitrary files to the filesystem during stan…

  • High 7.8
    CVE-2024-21633 Public exploit

    Arbitrary file write on Decoding

    Apktool is a tool for reverse engineering Android APK files. In versions 2.9.1 and prior, Apktool infers resource files' output path according to their resource names which can be manipulated by attacker to place files at desired location on the system Apktoo…