PT-2025-33618 · Buzzfeed+1 · Buzzfeed App+1

Fxizenta

·

CVE-2025-9093

·

Publicado

2025-08-17

·

Atualizado

2025-08-18

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions: BuzzFeed App version 2024.9
Description: A security vulnerability has been detected in BuzzFeed App 2024.9 on Android. The issue affects an unknown part of the file AndroidManifest.xml of the component com.buzzfeed.android, leading to improper export of Android application components. The attack requires local access. The exploit has been publicly disclosed and may be used.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-926

Identificadores relacionados

CVE-2025-9093

Produtos afetados

Android
Buzzfeed App