Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-9695

Опубликовано: 30 авг. 2025
Источник: nvd
CVSS3: 5.3
CVSS3: 5.5
CVSS2: 4.3
EPSS Низкий

Описание

A vulnerability was identified in GalleryVault Gallery Vault App up to 4.5.2 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.thinkyeah.galleryvault. The manipulation leads to improper export of android application components. The attack can only be performed from a local environment. The exploit is publicly available and might be used.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:galleryvault:gallery_vault:*:*:*:*:*:android:*:*
Версия до 4.5.2 (включая)
cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
Версия до 11.0 (исключая)

EPSS

Процентиль: 2%
0.00014
Низкий

5.3 Medium

CVSS3

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-926
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 5.5
github
5 месяцев назад

A vulnerability was identified in GalleryVault Gallery Vault App up to 4.5.2 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.thinkyeah.galleryvault. The manipulation leads to improper export of android application components. The attack can only be performed from a local environment. The exploit is publicly available and might be used.

EPSS

Процентиль: 2%
0.00014
Низкий

5.3 Medium

CVSS3

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-926
NVD-CWE-noinfo