Submit #615779: Yeelink Yeelight 3.5.4 Task Hijackinginfo

TitelYeelink Yeelight 3.5.4 Task Hijacking
BeschreibungTask Hijacking allows malicious apps to inherit permissions of vulnerable apps and is usually used for phishing login credentials of victims,its used by malicious actors to manipulate or take over tasks in Android, leading to significant vulnerabilities, This vulnerability applies to all Android versions before Android 11. The AndroidManifest.xml configuration needs to be modified to mitigate this attack.
Quelle⚠️ https://github.com/KMov-g/androidapps/blob/main/com.yeelight.cherry.md
Benutzer
 fxizenta (UID 28116)
Einreichung14.07.2025 12:57 (vor 9 Monaten)
Moderieren25.07.2025 20:57 (11 days later)
StatusAkzeptiert
VulDB Eintrag317778 [Yeelink Yeelight App bis 3.5.4 auf Android com.yeelight.cherry AndroidManifest.xml Local Privilege Escalation]
Punkte19

Do you want to use VulDB in your project?

Use the official API to access entries easily!