An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical internal files via the file…

Published:

31 maart 2026 om 22:00:00

Alert date:

1 april 2026 om 21:03:40

Source:

nvd.nist.gov

Mobile & IoT

CVE-2026-30291 is an arbitrary file overwrite vulnerability affecting Ora Tools PDF Reader & Editor APP version 4.3.5. The vulnerability allows attackers to overwrite critical internal files through the file import process, which can lead to arbitrary code execution or information exposure. This represents a high-severity security flaw in a widely-used PDF reader application available on Android platforms.

Technical details

Mitigation steps:

Affected products:

Ora Tools PDF Reader & Editor APP