DescriptionAdobe Digital Editions for Android before 4.5.13 contains a path traversal vulnerability that allows a co-installed, zero-permission application to write attacker-controlled content to attacker-chosen file paths by exploiting unsanitized _display_name values from a malicious content provider processed by the exported ReaderMainActivity. Because the app holds MANAGE_EXTERNAL_STORAGE permission, attackers can craft a provider URI with a path-traversal sequence in _display_name and a superstring authority containing com.google.android.apps.docs.storage to escape the app sandbox and create new files within the app's private directory or other apps' shared storage directories.