High severity8.4NVD Advisory· Published Apr 1, 2026· Updated Apr 27, 2026

CVE-2026-30291

Description

An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ora Tools/PDF Reader ' Reader & Editor APPllm-create
Range: =4.3.5

Patches

Vulnerability mechanics

References

github.com/Secsys-FDU/AF_CVEs/issues/18nvd
oratools.github.ionvd
play.google.com/store/apps/detailsnvd
secsys.fudan.edu.cnnvd

News mentions

No linked articles in our index yet.

cvss	0.546
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000