PT-2025-49319 · Rarlab · Rar App+1

Lu1U · Published 2025-12-05 · Updated 2025-12-12 · CVE-2025-14111

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Rarlab RAR App versions up to 7.11 Build 127

Description A security issue exists in the component com.rarlab.rar of Rarlab RAR App on Android. This allows for path traversal, potentially enabling remote attacks. Exploitation is considered highly complex and difficult, but the exploit has been publicly disclosed. The issue specifically affects RAR for Android and does not impact WinRAR or Unix RAR versions.

Recommendations Upgrade to version 7.20 build 128 to resolve the issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-14111

Affected Products

Rar App

Air For Android

References · 10

• 🔥 https://github.com/Secsys-FDU/AF_CVEs/blob/main/com.rarlab.rar/RAR%20APP%20Arbitrary%20File%20Write%20and%20Read%20Vulnerability.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-14111 · Security Note
• https://osv.dev/vulnerability/CVE-2025-14111 · Vendor Advisory
• https://t.me/CVEtracker/38970 · Telegram Post
• https://twitter.com/CVEnew/status/1997076131091304550 · Twitter Post
• https://vuldb.com/?ctiid.334491 · Note
• https://vuldb.com/?submit.697375 · Note
• https://t.me/cveNotify/145594 · Telegram Post
• https://t.me/cveNotify/144970 · Telegram Post
• https://vuldb.com/?id.334491 · Note