CVE-2025-10721

MEDIUM

Webull Investing & Trading App 11.2.5.63 - Info Disclosure

Title source: llm

Description

A vulnerability was determined in Webull Investing & Trading App 11.2.5.63 on Android. This vulnerability affects unknown code of the file AndroidManifest.xml. This manipulation causes improper export of android application components. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

References (5)

[Permissions Required, VDB Entry] https://vuldb.com/?id.325010

[Permissions Required, VDB Entry] https://vuldb.com/?ctiid.325010

[Permissions Required, VDB Entry] https://vuldb.com/?submit.645014

[Various Sources] https://github.com/KMov-g/androidapps/blob/main/org.dayup.stocks.md

[Various Sources] https://github.com/KMov-g/androidapps/blob/main/org.dayup.stocks.md#steps-to-reproduce

View Writeup ZIP pw:eip

Scores

CVSS v3 5.3

EPSS 0.0002

EPSS Percentile 3.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-926

Status published

Products (1)

Webull/Investing & Trading App 11.2.5.63

Published Sep 19, 2025

Tracked Since Feb 18, 2026