| Titre | Rarlab RAR APP(com.rarlab.rar) <=V7.11.build127 Path Traversal |
|---|
| Description | The RAR app lacks proper security checks during the file import process, allowing unauthorized apps to control the file name and content and use path traversal to overwrite/read arbitrary files in the app’s internal storage, which may lead to arbitrary code execution, exposure of sensitive information, denial of service, and other security impacts.
|
|---|
| La source | ⚠️ https://github.com/Secsys-FDU/AF_CVEs/blob/main/com.rarlab.rar/RAR%20APP%20Arbitrary%20File%20Write%20and%20Read%20Vulnerability.md |
|---|
| Utilisateur | Lu1u (UID 92433) |
|---|
| Soumission | 18/11/2025 13:51 (il y a 8 mois) |
|---|
| Modérer | 05/12/2025 15:57 (17 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 334491 [Rarlab RAR App jusqu’à 7.11 Build 127 sur Android com.rarlab.rar directory traversal] |
|---|
| Points | 18 |
|---|