CVE-2025-8258

Опубликовано: 28 июл. 2025

Источник: nvd

CVSS3: 5.3

CVSS2: 4.3

EPSS Низкий

Описание

A vulnerability, which was classified as problematic, has been found in Cool Mo Maigcal Number App up to 1.0.3 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.sdmagic.number. The manipulation leads to improper export of android application components. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

Ссылки

https://github.com/KMov-g/androidapps/blob/main/com.sdmagic.number.md
Exploit
Third Party Advisory
https://vuldb.com/?ctiid.317846
Permissions Required
VDB Entry
https://vuldb.com/?id.317846
Third Party Advisory
VDB Entry
https://vuldb.com/?submit.623472
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:coolmo:maigcal_number:1.0.0:*:*:*:*:android:*:*

cpe:2.3:a:coolmo:maigcal_number:1.0.1:*:*:*:*:android:*:*

cpe:2.3:a:coolmo:maigcal_number:1.0.2:*:*:*:*:android:*:*

cpe:2.3:a:coolmo:maigcal_number:1.0.3:*:*:*:*:android:*:*

EPSS

Процентиль: 2%

0.00015

Низкий

5.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-926

NVD-CWE-Other

Связанные уязвимости

GHSA-qfvp-cgp6-7939