Vulnerability in Bluebird Com.bluebird.kiosk.launcher
CVE-2025-5344
Bluebird devices contain a pre-loaded kiosk application. This application exposes an unsecured service provider "com.bluebird.kiosk.launcher.IpartnerKioskRemoteService". A local attacker can bind to the AIDL-type service to modify device's global settings and wallpaper image. This issue affects all versions before 1.1.2.
EPSS: 0.001 (3.7th percentile) — read the EPSS interpretation.
Affected products
- Bluebird Com.bluebird.kiosk.launcher — versions 0
Weakness classification (CWE)
References
- cvd@cert.pl (third-party-advisory)