ZeroDay Findings
Sign inSign up

Findings

CVE-2026-108544

Lippu Docx Reader Office Viewer App path traversal

Published Oct 11, 2026 · updated Oct 14, 2026 · Lippu Docx Reader Office Viewer App

A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument _display_name leads to path traversal. The attack may be performed from remote.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 11, 2026 · Catalog

    Detected

    A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument _display_name leads to path traversal. The attack may be performed from remote.

  2. Oct 14, 2026 · Catalog

    Updated

    A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument _display_name leads to path traversal. The attack may be performed from remote.

Affected

  • vendor Lippu Docx Reader Office Viewer Appversion unspecified

Sources

  • CIRCL Vulnerability LookupCVE-2026-108544

    A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument _display_name leads to path traversal. The attack may be performed from r

    vulnerability.circl.lu
  • CVE.orgCVE-2026-108544

    Official CVE identifier

    cve.org

References