CVE-2025-68713

Name of the Vulnerable Software and Affected Versions Rakuten Send Anywhere (File Transfer) for Android version 23.2.9

Description An issue in the application allows untrusted apps without permissions to force arbitrary file downloads into the app's scoped storage. These files then appear in the trusted Received interface. This can lead to arbitrary code execution if an APK file is used as the payload, or a denial-of-service condition caused by resource exhaustion from oversized transfers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.