How severe is CVE-2025-5344?

The severity of CVE-2025-5344 has not been assessed with CVSS v3.

CVE-2025-5344

NONE

Bluebird devices contain a pre-loaded kiosk application. This application exposes an unsecured service provider "com.bluebird.kiosk.launcher.IpartnerKioskRemoteService". A local attacker can bind to t

Publicado: 7/17/2025Actualizado: 7/17/2025

Descripción

Bluebird devices contain a pre-loaded kiosk application. This application exposes an unsecured service provider "com.bluebird.kiosk.launcher.IpartnerKioskRemoteService". A local attacker can bind to the AIDL-type service to modify device's global settings and wallpaper image. This issue affects all versions before 1.1.2.

Análisis IAImpulsado por IA

Referencias

https://cert.pl/en/posts/2025/07/CVE-2025-5344