Docx Reader Office Viewer App vulnerability

What happened

A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument _display_name leads to path traversal. The attack may be performed from remote.

Affected versions

Docx Reader Office Viewer App: 1.4.0; 1.4.1; 1.4.2; 1.4.3; 1.4.4; 1.4.5 Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.