This vulnerability involves a path traversal issue in the getExternalCacheDir function of the chatpdf.pro component within iAI Lab PDF AI App 4.21.0 on Android. By manipulating the _display_name argument, a local attacker can traverse directories outside the intended cache directory. The attack requires local access to the device. The vulnerability has been publicly disclosed, but the vendor has not provided any response or fix. No official remediation or patch is currently available.

Successful exploitation allows a local attacker to access or manipulate files outside the intended cache directory, potentially leading to unauthorized access to sensitive files or data on the device. The impact is limited by the requirement for local access and the scope of the affected function.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should limit local access to the device and avoid untrusted applications or users that could exploit this vulnerability.