CVE-2025-5344

Vulnerability Description

Bluebird devices contain a pre-loaded kiosk application. This application exposes an unsecured service provider "com.bluebird.kiosk.launcher.IpartnerKioskRemoteService". A local attacker can bind to the AIDL-type service to modify device's global settings and wallpaper image. This issue affects all versions before 1.1.2.

Related Weaknesses (CWE)

CWE-926

References

https://cert.pl/en/posts/2025/07/CVE-2025-5344

FAQ

What is CVE-2025-5344?

CVE-2025-5344 is a documented vulnerability. Bluebird devices contain a pre-loaded kiosk application. This application exposes an unsecured service provider "com.bluebird.kiosk.launcher.IpartnerKioskRemoteService". A local attacker can bind to t...

How severe is CVE-2025-5344?

CVSS scoring is not yet available for CVE-2025-5344. Check NVD for updates.

Is there a patch for CVE-2025-5344?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.