A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. (CVE-2026-108544)

CVE-2026-108544 describes a path traversal vulnerability in the Lippu Docx Reader Office Viewer App on Android versions up to 1.4.5. The vulnerability arises from improper handling of the _display_name argument in the ViewTxt function, allowing an attacker to perform path traversal attacks remotely. This could potentially allow unauthorized access or modification of files outside the intended directory scope.

Exploitation of this vulnerability could lead to limited confidentiality, integrity, and availability impacts as indicated by the CVSS vector (C:L/I:L/A:L). The attacker can remotely manipulate file paths, potentially accessing or modifying files outside the app's intended scope.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Users should monitor vendor communications for updates and avoid opening untrusted documents with the affected app versions.