CVE-2025-8258 MEDIUM

CVE-2025-8258: Cool Mo Maigcal Number App com.sdmagic.number AndroidManifest.xml improper export of android application components

Vendor Cool Mo
Product Maigcal Number App
Weakness CWE-926
Published July 28, 2025
Last update July 28, 2025
View on NVD All CVEs

CVSS base score

4.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability, which was classified as problematic, has been found in Cool Mo Maigcal Number App up to 1.0.3 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.sdmagic.number. The manipulation leads to improper export of android application components. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

July 28, 2025 CVE published
July 28, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-9097 Euro Information CIC banque et compte en ligne App com.cic_prod.bad AndroidManifest.xml improper export of android application components CVE-2024-13916 Exposure of Applications' Encryption PINs in Kruger&Matz AppLock CVE-2025-9135 Verkehrsauskunft Österreich SmartRide/cleVVVer/BusBahnBim/Salzburg Verkehr AndroidManifest.xml improper export of android application components CVE-2021-25379 CVE-2025-7890 Dunamu StockPlus App com.dunamu.stockplus AndroidManifest.xml improper export of android application components