Description
A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument _display_name leads to path traversal. The attack may be performed from remote.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Lippu | Docx Reader Office Viewer App | 1.4.0, 1.4.1, 1.4.2, 1.4.3, 1.4.4, 1.4.5 | — |
References
- VDB-416199 | Lippu Docx Reader Office Viewer App path traversal vdb-entry technical-description
- VDB-416199 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-108544 | CVE Analysis and Report third-party-advisory
- Submit #954042 | LIPPU TECHNOLOGY Docx Reader - Office Viewer APP (https://play.google.com/store/apps/details?id=word.office.docxviewer.document.docx.reader) <=1.4.5 Path Traversal third-party-advisory
- https://github.com/Secsys-FDU/AF_CVEs/issues/31 issue-tracking