VULNERABILITY INTELLIGENCE

CVE-2025-9093

CVSS score5.3 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2025-08-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

A security vulnerability has been detected in BuzzFeed App 2024.9 on Android. This affects an unknown part of the file AndroidManifest.xml of the component com.buzzfeed.android. The manipulation leads to improper export of android application components. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Weakness classification

  • cna@vuldb.com: CWE-926
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references