A security vulnerability has been detected in Rareprob HD Video Player All Formats App 12.1.372 on Android. Impacted is an unknown function of the component com.rocks.music.videoplayer. The manipulation leads to path traversal. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://github.com/Secsys-FDU/AF_CVEs/blob/main/HD%20Video%20Player%20All%20Formats/HD%20Video%20Player%20All%20Formats%20APP%20Arbitrary%20File%20Overwrite%20Vulnerability.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.334032 | Permissions Required VDB Entry |
| https://vuldb.com/?id.334032 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.692169 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
| AND |
|
History
26 Feb 2026, 23:30
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* cpe:2.3:a:rareprob:hd_video_player_all_formats:12.1.372:*:*:*:*:*:*:* |
|
| First Time |
Rareprob
Rareprob hd Video Player All Formats Google android |
|
| References | () https://github.com/Secsys-FDU/AF_CVEs/blob/main/HD%20Video%20Player%20All%20Formats/HD%20Video%20Player%20All%20Formats%20APP%20Arbitrary%20File%20Overwrite%20Vulnerability.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.334032 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.334032 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.692169 - Third Party Advisory, VDB Entry |
02 Dec 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-02 15:15
Updated : 2026-02-26 23:30
NVD link : CVE-2025-13876
Mitre link : CVE-2025-13876
CVE.ORG link : CVE-2025-13876
JSON object : View
Products Affected
rareprob
- hd_video_player_all_formats
- android
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')