CVE-2026-104982

MediumCVSS 4.3

Published: 03/10/2026(UTC)Translated: 03/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.44%

36th percentile - higher than 36% of all known CVEs

Summary

In Linux Mint Xreader up to 4.6.5, the function setup_document_content_list/g_strdup_printf in backend/epub/epub-document.c (EPUB File Handler) is vulnerable to path traversal. The attack can be performed remotely and the exploit has been publicly disclosed. Upgrading to version 4.6.6 fixes the issue.

Risk Assessment

A remote attacker could exploit path traversal to access or modify files outside the intended directory, potentially leading to data disclosure or corruption.

Recommendation

Update Xreader to version 4.6.6 or later, which contains the fix (patch a5aecea074e8564b7a22f1ce054b31ec862974b7).

Other vulnerabilities in Linux Mint Xreader

CVE-2026-104983Medium
In Linux Mint Xreader up to 4.6.9, the function g_file_get_child in shell/ev-window.c (PDF Attachment Saving Handler) is vulnerable to path traversal via manipulation of the attachment argument. The attack can be performed remotely and the exploit has been publicly disclosed.

Original NVD description (English source)

A flaw has been found in Linux Mint Xreader up to 4.6.5. This issue affects the function setup_document_content_list/g_strdup_printf of the file backend/epub/epub-document.c of the component EPUB File Handler. This manipulation causes path traversal. The attack is possible to be carried out remotely. The exploit has been published and may be used. Upgrading to version 4.6.6 is capable of addressing this issue. Patch name: a5aecea074e8564b7a22f1ce054b31ec862974b7. It is advisable to upgrade the affected component. One of the project maintainers explains, that "EPUB support was removed from Xreader and reimplemented in Xepub".

Vulnerability data from NVD (NIST) · CISA KEV · EPSS