ZeroDay Findings
Sign inSign up

Findings

CVE-2026-108544

Lippu Docx Reader Office Viewer App path traversal

Published Oct 11, 2026 · updated Oct 14, 2026 · Lippu Docx Reader Office Viewer App

A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument _display_name leads to path traversal. The attack may be performed from remote.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 11, 2026 · Catalog

    Detected

    A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument _display_name leads to path traversal. The attack may be performed from remote.

  2. Oct 14, 2026 · Catalog

    Updated

    A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument _display_name leads to path traversal. The attack may be performed from remote.

Affected

  • vendor Lippu Docx Reader Office Viewer Appversion unspecified

Sources

  • CIRCL Vulnerability LookupVulnerability recordCVE-2026-108544

    A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument _display_name leads to path traversal. The attack may be performed from r

    vulnerability.circl.lu
  • CVE.orgVulnerability recordCVE-2026-108544

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-108544

    30-day exploitation probability 0.3%

    first.org

References