CVE-2026-11319: TickTick Limited's TickTick for Android 8.2.2.0 contains a path traversal flaw in its exported ShareReceiveActivity.
A malicious local app can supply a crafted filename to write files outside the attachment directory.
No in-the-wild exploitation is confirmed and no fixed version is listed.