VULNERABILITY INTELLIGENCE
CVE-2025-5344
EPSS probability0.16%
CISA KEVNot currently listed
Published2025-07-17
Last modified2026-06-17
Description
Bluebird devices contain a pre-loaded kiosk application. This application exposes an unsecured service provider "com.bluebird.kiosk.launcher.IpartnerKioskRemoteService". A local attacker can bind to the AIDL-type service to modify device's global settings and wallpaper image. This issue affects all versions before 1.1.2.
Weakness classification
- cvd@cert.pl: CWE-926