| Title | Rarlab RAR APP(com.rarlab.rar) <=V7.11.build127 Path Traversal |
|---|
| Description | The RAR app lacks proper security checks during the file import process, allowing unauthorized apps to control the file name and content and use path traversal to overwrite/read arbitrary files in the app’s internal storage, which may lead to arbitrary code execution, exposure of sensitive information, denial of service, and other security impacts.
|
|---|
| Source | ⚠️ https://github.com/Secsys-FDU/AF_CVEs/blob/main/com.rarlab.rar/RAR%20APP%20Arbitrary%20File%20Write%20and%20Read%20Vulnerability.md |
|---|
| User | Lu1u (UID 92433) |
|---|
| Submission | 11/18/2025 13:51 (9 months ago) |
|---|
| Moderation | 12/05/2025 15:57 (17 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 334491 [Rarlab RAR App up to 7.11 Build 127 on Android com.rarlab.rar path traversal] |
|---|
| Points | 18 |
|---|