TickTick Limited CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM TickTick Limited CVE published 2026-10-19

CVE-2026-11319

The TickTick Android application, version 8.2.2.0, contains a path traversal vulnerability in its exported ShareReceiveActivity. This vulnerability allows a malicious local application to write files outside the intended attachment directory by supplying a crafted content:// URI with a traversal filename via ACTION_SEND intents. Defenders responsible for managing and securing Android applications, particu [truncated]