Librera Reader: Path traversal in exported activity allows file write
Librera Reader for Android (versionCode 7222) exports an activity that other apps can call without any permission. A calling app can supply a crafted file name that the reader uses to write and truncate files in shared storage outside its sandbox. No user interaction is needed, and the advisory states that writes beyond the Download folder additionally require that the victim app has been granted All files access.
foobnix · Librera Reader
