CVE-2025-9695

Medium CVSS: 4.8

A vulnerability was identified in GalleryVault Gallery Vault App up to 4.5.2 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.thinkyeah.galleryvault. The manipulation leads to improper export of android application components. The attack can only be performed from a local environment. The exploit is publicly available and might be used.

Vendor

Galleryvault

Product

Gallery Vault

CWE

CWE-926

Yayın Tarihi

2025-08-30 16:15:37

Güncelleme

2025-09-10 12:54:03

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-926 Gallery Vault MEDIUM Galleryvault 2025

Referanslar

https://github.com/KMov-g/androidapps/blob/main/com.thinkyeah.galleryvault.md https://github.com/KMov-g/androidapps/blob/main/com.thinkyeah.galleryvault.md#steps-to-reproduce https://vuldb.com/?ctiid.321906 https://vuldb.com/?id.321906 https://vuldb.com/?submit.639039 https://github.com/KMov-g/androidapps/blob/main/com.thinkyeah.galleryvault.md https://github.com/KMov-g/androidapps/blob/main/com.thinkyeah.galleryvault.md#steps-to-reproduce