CVE-2025-5344

NONE

Bluebird devices contain a pre-loaded kiosk application. This application exposes an unsecured service provider "com.bluebird.kiosk.launcher.IpartnerKioskRemoteService". A local attacker can bind to t

Veröffentlicht: 7/17/2025Aktualisiert: 7/17/2025
Auf NVD ansehenAuf MITRE ansehen

Beschreibung

Bluebird devices contain a pre-loaded kiosk application. This application exposes an unsecured service provider "com.bluebird.kiosk.launcher.IpartnerKioskRemoteService". A local attacker can bind to the AIDL-type service to modify device's global settings and wallpaper image. This issue affects all versions before 1.1.2.

KI-AnalyseKI-gestützt

Referenzen