Critical · 9.1 CVE-2026-107053 EUVD-2026-113260GHSA-m2r9-39v4-c9p7

Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and truncate files i…

Published Oct 29, 2026 · Updated Nov 3, 2026 · Assigned by mitre

Description

Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and truncate files in a shared storage space outside of the sandbox.

References

https://f-droid.org/packages/com.foobnix.pro.pdf.reader/
https://github.com/foobnix/LibreraReader
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107053.md