Apktool vulnerabilities

2 known vulnerabilities in Apktool from iBotPeaches. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Apktool: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-39973Apr 21, 2026iBotPeaches

  Apktool is a tool for reverse engineering Android APK files. In versions 3.0.0 and 3.0.1, a path traversal vulnerability in `brut/androlib/res/decoder/ResFileDecoder.java` allows a maliciously crafted APK to write arbitrary files to the filesystem during stand

• 7.8 High severity

  Apktool: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-21633Jan 3, 2024iBotPeachesEPSS 1.33%

  Apktool is a tool for reverse engineering Android APK files. In versions 2.9.1 and prior, Apktool infers resource files' output path according to their resource names which can be manipulated by attacker to place files at desired location on the system Apktool