VulnerabilityAnalyzed
CVE-2025-9674
This manipulation causes improper export of android application components.
LOW 1.9EPSS 0.27%
Does this matter?
Lower severity and a low EPSS score (0.27%). Track it; it rarely justifies an emergency change on its own.
Description
A flaw has been found in Transbyte Scooper News App up to 1.2 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.hatsune.eagleee. This manipulation causes improper export of android application components. The attack requires local access. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- CVSS 4.0
- 1.9 LOWCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.27% probability · 19th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-926
- Affected
- transbyte/scooper news
- Source
- cna@vuldb.com
References
- https://github.com/KMov-g/androidapps/blob/main/com.hatsune.eagleee.mdExploit, Mitigation, Third Party Advisory
- https://github.com/KMov-g/androidapps/blob/main/com.hatsune.eagleee.md#steps-to-reproduceExploit, Mitigation, Third Party Advisory
- https://vuldb.com/?ctiid.321884Permissions Required, VDB Entry
- https://vuldb.com/?id.321884Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.638068Third Party Advisory, VDB Entry
- https://github.com/KMov-g/androidapps/blob/main/com.hatsune.eagleee.mdExploit, Mitigation, Third Party Advisory
- https://github.com/KMov-g/androidapps/blob/main/com.hatsune.eagleee.md#steps-to-reproduceExploit, Mitigation, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.