CVE-2020-36381: Aaptjs Project Aaptjs

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

An issue was discovered in the singleCrunch function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.

Affected products

• Aaptjs Project Aaptjs: version 1.3.1 only

Published 2021-10-31. Last modified 2026-06-17.