CVE-2025-9675

MEDIUM

Voice Changer App <1.1.0 - Info Disclosure

Title source: llm

Description

A vulnerability was determined in Voice Changer App up to 1.1.0. This issue affects some unknown processing of the file AndroidManifest.xml of the component com.tuyangkeji.changevoice. Executing manipulation can lead to improper export of android application components. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized.

References (5)

[Exploit, Mitigation, Third Party Advisory] https://github.com/KMov-g/androidapps/blob/main/com.tuyangkeji.changevoice.md

View Exploit ZIP pw:eip

[Exploit, Mitigation, Third Party Advisory] https://github.com/KMov-g/androidapps/blob/main/com.tuyangkeji.changevoice.md#steps-to-reproduce

[Permissions Required, VDB Entry] https://vuldb.com/?ctiid.321887

[Third Party Advisory, VDB Entry] https://vuldb.com/?id.321887

[Third Party Advisory, VDB Entry] https://vuldb.com/?submit.638073

Scores

CVSS v3 5.3

EPSS 0.0003

EPSS Percentile 6.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Classification

CWE

CWE-926

Status published

Affected Products (1)

voice_changer_project/voice_changer < 1.1.0

Timeline

Published Aug 29, 2025

Tracked Since Feb 18, 2026