{"id":"CVE-2026-18853","state":"PUBLISHED","title":"ZomboDroid Meme Generator App com.zombodroid.MemeGenerator t5.l.c path traversal","description":"A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","publishedAt":"2026-08-04T23:45:10.459Z","updatedAt":"2026-08-05T13:38:27.696Z","severity":{"score":4.8,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["ZomboDroid Meme Generator App"],"affected":[{"vendor":"ZomboDroid","product":"Meme Generator App","versions":[{"version":"4.6830","status":"affected"}],"cpes":["cpe:2.3:a:zombodroid:meme_generator_app:*:*:*:*:*:*:*:*"],"modules":["com.zombodroid.MemeGenerator"]}],"references":["https://vuldb.com/vuln/385863","https://vuldb.com/vuln/385863/cti","https://vuldb.com/cve/CVE-2026-18853","https://vuldb.com/submit/858251","https://github.com/actuator/com.zombodroid.MemeGenerator/"],"weaknesses":["CWE-22"],"ingestedAt":"2026-10-29T20:11:10.572Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/18xxx/CVE-2026-18853.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-18853","state":"PUBLISHED","datePublished":"2026-08-04T23:45:10.459Z","dateUpdated":"2026-08-05T13:38:27.696Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-08-04T15:51:55.217Z"},"containers":{"cna":{"title":"ZomboDroid Meme Generator App com.zombodroid.MemeGenerator t5.l.c path traversal","descriptions":[{"lang":"en","value":"A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."}],"affected":[{"vendor":"ZomboDroid","product":"Meme Generator App","versions":[{"version":"4.6830","status":"affected"}],"cpes":["cpe:2.3:a:zombodroid:meme_generator_app:*:*:*:*:*:*:*:*"],"modules":["com.zombodroid.MemeGenerator"]}],"references":[{"url":"https://vuldb.com/vuln/385863","name":"VDB-385863 | ZomboDroid Meme Generator App com.zombodroid.MemeGenerator t5.l.c path traversal","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/385863/cti","name":"VDB-385863 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-18853","name":"CVE-2026-18853 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/858251","name":"Submit #858251 | ZomboDroid com.zombodroid.MemeGenerator Version 4.6830 Path Traversal","tags":["third-party-advisory"]},{"url":"https://github.com/actuator/com.zombodroid.MemeGenerator/","tags":["exploit"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":4.8,"vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":5.3,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":5.3,"vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":4.3,"vectorString":"AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-22","type":"CWE","lang":"en","description":"Path Traversal"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-08-04T23:45:10.459Z"},"timeline":[{"time":"2026-08-04T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-08-04T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-08-04T17:57:10.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Actuator (VulDB User)","type":"reporter"},{"lang":"en","value":"VulDB CNA Team","type":"coordinator"}],"x_generator":["VulDB PVTS v202608"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-08-05T13:38:19.656092Z","id":"CVE-2026-18853","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-08-05T13:38:27.696Z"}}]}}}