CVE-2026-18907

Description

Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename.

References

• https://security.tecno.com/SRC/securityUpdates