CVE-2025-7940 MEDIUM

CVE-2025-7940: Genshin Albedo Cat House App com.house.auscat AndroidManifest.xml improper export of android application components

Vendor Genshin

Product Albedo Cat House App

Weakness CWE-926

Published July 21, 2025

Last update July 23, 2025

View on NVD All CVEs

CVSS base score

4.8/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability was found in Genshin Albedo Cat House App 1.0.2 on Android. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.house.auscat. The manipulation leads to improper export of android application components. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

July 21, 2025 CVE published

July 23, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-7940 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/926.html

Related vulnerabilities

04Related CVE

CVE-2025-8275 bsc Peru Cocktails App bsc.devy.peru_cocktails AndroidManifest.xml improper export of android application components CVE-2024-13915 Unrestricted Access to Exported Service in com.pri.factorytest CVE-2025-9672 Rejseplanen App de.hafas.android.rejseplanen AndroidManifest.xml improper export of android application components CVE-2025-10721 Webull Investing & Trading App AndroidManifest.xml improper export of android application components CVE-2025-8512 TVB Big Big Shop App hk.com.tvb.bigbigshop AndroidManifest.xml improper export of android application components