| Titolo | Rarlab RAR APP(com.rarlab.rar) <=V7.11.build127 Path Traversal |
|---|
| Descrizione | The RAR app lacks proper security checks during the file import process, allowing unauthorized apps to control the file name and content and use path traversal to overwrite/read arbitrary files in the app’s internal storage, which may lead to arbitrary code execution, exposure of sensitive information, denial of service, and other security impacts.
|
|---|
| Fonte | ⚠️ https://github.com/Secsys-FDU/AF_CVEs/blob/main/com.rarlab.rar/RAR%20APP%20Arbitrary%20File%20Write%20and%20Read%20Vulnerability.md |
|---|
| Utente | Lu1u (UID 92433) |
|---|
| Sottomissione | 18/11/2025 13:51 (8 mesi fa) |
|---|
| Moderazione | 05/12/2025 15:57 (17 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 334491 [Rarlab RAR App fino a 7.11 Build 127 su Android com.rarlab.rar directory traversal] |
|---|
| Punti | 18 |
|---|