CVE-2026-107057
Received Received - Intake

Arbitrary Code Execution in AndBible via Malicious Module Upload

Publication date: 2026-10-29

Last updated on: 2026-10-29

Assigner: MITRE

Description
An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-29
Last Modified
2026-10-29
Generated
2026-10-29
AI Q&A
2026-10-29
EPSS Evaluated
N/A
NVD
CVE-2026-107057
EUVD
EUVD-2026-113257

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
n/a n/a n/a

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-107057 is a vulnerability in AndBible version 1111 for Android. It allows attackers to upload a specially crafted module ZIP file that the app unzips into its private storage without user interaction or required permissions. The issue involves improper handling of ZIP archives, enabling path traversal attacks to write files outside intended directories.

Detection Guidance

Check if AndBible version 1111 is installed on your Android device. Look for unexpected files in the app's private data directory, particularly those created without user interaction. Review logs for EXTRA_STREAM intents or ZIP archive processing events.

Impact Analysis

This vulnerability could allow an attacker to place arbitrary files in AndBible's private data directory, potentially corrupting app data or disrupting functionality. It does not directly expose confidential data or enable code execution, but it compromises app integrity.

Mitigation Strategies

Uninstall AndBible version 1111 immediately. Avoid installing modules from untrusted sources. Monitor for unusual app behavior or file modifications in the app's private storage.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-107057. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart