| Titre | Yeelink Yeelight 3.5.4 Task Hijacking |
|---|
| Description | Task Hijacking allows malicious apps to inherit permissions of vulnerable apps and is usually used for phishing login credentials of victims,its used by malicious actors to manipulate or take over tasks in Android, leading to significant vulnerabilities, This vulnerability applies to all Android versions before Android 11. The AndroidManifest.xml configuration needs to be modified to mitigate this attack. |
|---|
| La source | ⚠️ https://github.com/KMov-g/androidapps/blob/main/com.yeelight.cherry.md |
|---|
| Utilisateur | fxizenta (UID 28116) |
|---|
| Soumission | 14/07/2025 12:57 (il y a 9 mois) |
|---|
| Modérer | 25/07/2025 20:57 (11 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 317778 [Yeelink Yeelight App jusqu’à 3.5.4 sur Android com.yeelight.cherry AndroidManifest.xml Local Privilege Escalation] |
|---|
| Points | 19 |
|---|