CVE-2025-10195

MEDIUM

Seismic App 2.4.2 - Info Disclosure

Title source: llm

Description

A vulnerability has been found in Seismic App 2.4.2 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component com.seismic.doccenter. Such manipulation leads to improper export of android application components. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

References (5)

[Various Sources] https://github.com/KMov-g/androidapps/blob/main/com.seismic.doccenter.md

View Writeup ZIP pw:eip

[Various Sources] https://github.com/KMov-g/androidapps/blob/main/com.seismic.doccenter.md#steps-to-reproduce

[Permissions Required, VDB Entry] https://vuldb.com/?ctiid.323235

[Permissions Required, VDB Entry] https://vuldb.com/?id.323235

[Permissions Required, VDB Entry] https://vuldb.com/?submit.639041

Scores

CVSS v3 5.3

EPSS 0.0001

EPSS Percentile 2.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Classification

CWE

CWE-926

Status draft

Timeline

Published Sep 10, 2025

Tracked Since Feb 18, 2026