An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip.

Summary

An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip.

Remediation

1. Inventory every Unknown product deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Referencehttps://f-droid.org/packages/net.bible.android.activity/
• Referencehttps://github.com/AndBible/and-bible
• Referencehttps://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107057.md