Apktool Security Vulnerabilities

CVE-2024-21633

Apktool is a tool for reverse engineering Android APK files. In versions 2.9.1 and prior, Apktool infers resource files' output path according to their resource names which can be manipulated by attacker to place files at desired location on the system Apktool runs on. Affected environments are tho...

CVE-2024-24482

Aprktool before 2.9.3 on Windows allows ../ and /.. directory traversal.