CVE-2025-8258

MEDIUM

Cool Mo Maigcal Number App <1.0.3 - Info Disclosure

Title source: llm
STIX 2.1

Description

A vulnerability, which was classified as problematic, has been found in Cool Mo Maigcal Number App up to 1.0.3 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.sdmagic.number. The manipulation leads to improper export of android application components. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

Scores

CVSS v3 5.3
EPSS 0.0003
EPSS Percentile 7.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-926
Status published
Products (4)
coolmo/maigcal_number 1.0.0
coolmo/maigcal_number 1.0.1
coolmo/maigcal_number 1.0.2
coolmo/maigcal_number 1.0.3
Published Jul 28, 2025
Tracked Since Feb 18, 2026