An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical internal files via the file…

CVE-2026-30291 is an arbitrary file overwrite vulnerability affecting Ora Tools PDF Reader & Editor APP version 4.3.5. The vulnerability allows attackers to overwrite critical internal files through the file import process, which can lead to arbitrary code execution or information exposure. This represents a high-severity security flaw in a widely-used PDF reader application available on Android platforms.