How severe is CVE-2025-5344?

The severity of CVE-2025-5344 has not been assessed with CVSS v3.

CVE-2025-5344

NONE

Bluebird devices contain a pre-loaded kiosk application. This application exposes an unsecured service provider "com.bluebird.kiosk.launcher.IpartnerKioskRemoteService". A local attacker can bind to t

Published: 7/17/2025Updated: 7/17/2025

Description

Bluebird devices contain a pre-loaded kiosk application. This application exposes an unsecured service provider "com.bluebird.kiosk.launcher.IpartnerKioskRemoteService". A local attacker can bind to the AIDL-type service to modify device's global settings and wallpaper image. This issue affects all versions before 1.1.2.

AI AnalysisPowered by AI

References

https://cert.pl/en/posts/2025/07/CVE-2025-5344