Vulnerability · Published Aug 4, 2026 · Assigned by VulDB
CVE-2026-18853ZomboDroid Meme Generator App com.zombodroid.MemeGenerator t5.l.c path traversal
Medium 5.3
In plain English
A medium-severity path traversal in Meme Generator App from ZomboDroid. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).
Official description
A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ZomboDroid | Meme Generator App | 4.6830 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-385863 | ZomboDroid Meme Generator App com.zombodroid.MemeGenerator t5.l.c path traversal vdb-entry, technical-description
- VDB-385863 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- CVE-2026-18853 | CVE Analysis and Report third-party-advisory
- Submit #858251 | ZomboDroid com.zombodroid.MemeGenerator Version 4.6830 Path Traversal third-party-advisory
- https://github.com/actuator/com.zombodroid.MemeGenerator/ exploit