CVE-2026-108544
A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android
- Risk score
- 45/100
- CVSS
- 6.3 v3.1
- Exploit chance (30 days)
- 0.4%
- Published
- 11 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument _display_name leads to path traversal. The attack may be performed from remote.
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 6.3 medium
References
Original description
A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument _display_name leads to path traversal. The attack may be performed from remote.
Last activity 11 Oct 2026. Patch Forecast updates every hour.