Live › vulnerability › CVE-2026-107057
AndBible versionCode 1111 accepts a crafted module zip file that can make the app execute arbitrary code. An attacker who gets a user to load such a module can run code on the device with the app's permissions.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 17:26 UTC. All times on this page are UTC.
Users of the AndBible Android Bible app at versionCode 1111 who import module zip files, especially from untrusted sources. The sources do not describe the exact import path or whether any other configuration is needed.
No product ranges from the sources yet.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip.
This page as .md · .json · in your agent: get_signal("CVE-2026-107057")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.