The vulnerability permits an attacker to overwrite any file within the application’s internal storage, enabling the execution of attacker-supplied code or the disclosure of sensitive data. This flaw originates from inadequate validation of file paths during the import process and falls under the common weakness enumeration CWE‑22.

Triumph Adler Mobile Print version 3.7.2.251001 on Android devices is affected. Users of this specific build should verify whether they are running this version and whether security updates are available.

The CVSS score of 8.4 indicates a high severity for potential remote code execution. Although the EPSS score is below 1% and the vulnerability is not listed in the CISA KEV catalog, exploitation remains plausible due to the local file import vector. The likely attack pathway involves a user opening a crafted PDF that forces the application to overwrite internal files, a conclusion inferred from the described file import process.