PT-2025-12019

CVE-2024-0245

·

Published

2025-03-20

·

Updated

2025-03-20

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions hamza417/inure versions prior to build97
Description A misconfiguration in the AndroidManifest.xml file allows for task hijacking, permitting malicious applications to inherit permissions of the vulnerable app. This could lead to the exposure of sensitive information. An attacker can create a malicious app that hijacks the legitimate Inure app, intercepting and stealing sensitive information when installed on the victim's device. This issue affects all Android versions before Android 11.
Recommendations For versions prior to build97, update to build97 or later to resolve the issue. As a temporary workaround, consider restricting the installation of untrusted applications to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾