CNNVD-202508-3494 Information

CNNVD ID

CNNVD-202508-3494

CVE-2025-9673

  • CNNVD Published: 2025-08-29

Description (Chinese)

Kakao Hey Kakao App是韩国Kakao公司的一款通讯应用。 Kakao Hey Kakao App 2.17.4及之前版本存在安全漏洞,该漏洞源于文件AndroidManifest.xml中组件导出不当,可能导致本地攻击。

Description (English)

Kakao Hey Kakao App is a communications application of the Korean company Kakao. There is a security gap in Kakao Hey Kakao App 2.17.4 and earlier versions, which stems from the inappropriate export of components in document AndroidManifest.xml, which could lead to local attacks.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

多音通讯

Published

2025-08-29

Last Modified

2026-02-24

References

https://vuldb.com/?submit.637925 https://vuldb.com/?id.321883 https://vuldb.com/?ctiid.321883 https://github.com/KMov-g/androidapps/blob/main/com.kakao.i.connect.md#steps-to-reproduce https://nvd.nist.gov/vuln/detail/CVE-2025-9673 https://access.redhat.com/security/cve/cve-2025-9673

Share on: