CVE-2025-8707 MEDIUM

CVE-2025-8707: Huuge Box App com.huuge.game.zjbox AndroidManifest.xml improper export of android application components

Vendor Huuge

Product Box App

Weakness CWE-926

Published August 8, 2025

Last update August 8, 2025

View on NVD All CVEs

CVSS base score

4.8/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability was found in Huuge Box App 1.0.3 on Android. It has been classified as problematic. This affects an unknown part of the file AndroidManifest.xml of the component com.huuge.game.zjbox. The manipulation leads to improper export of android application components. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

August 8, 2025 CVE published

August 8, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-8707 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/926.html

Related vulnerabilities

04Related CVE

CVE-2025-9097 Euro Information CIC banque et compte en ligne App com.cic_prod.bad AndroidManifest.xml improper export of android application components CVE-2023-44129 Messaging - Gaining access to arbitrary content providers via QClipIntentReceiverActivity CVE-2025-5345 Exposed AIDL service allowing to read and delete files with system-level privileges in Bluebird filemanager application CVE-2024-13917 Intent Injection in Kruger&Matz AppLock application CVE-2025-9671 UAB Paytend App com.passport.cash AndroidManifest.xml improper export of android application components