A vulnerability, which was classified as problematic, has been found in TVB Big Big Shop App 2.9.0 on Android. This issue affects some unknown processing of the file AndroidManifest.xml of the component hk.com.tvb.bigbigshop. The manipulation leads to improper export of android application components. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
References
Configurations
No configuration.
History
15 Apr 2026, 00:35
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (es) Se ha detectado una vulnerabilidad clasificada como problemática en la aplicación TVB Big Big Shop 2.9.0 para Android. Este problema afecta a un procesamiento desconocido del archivo AndroidManifest.xml del componente hk.com.tvb.bigbigshop. Esta manipulación provoca la exportación incorrecta de componentes de la aplicación Android. Es necesario abordar un ataque localmente. Se ha hecho público el exploit y puede que sea utilizado. Se contactó al proveedor con antelación para informarle sobre esta divulgación, pero no respondió. |
04 Aug 2025, 15:06
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
03 Aug 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-03 14:15
Updated : 2026-04-29 01:00
NVD link : CVE-2025-8512
Mitre link : CVE-2025-8512
CVE.ORG link : CVE-2025-8512
JSON object : View
Products Affected
No product.
CWE
CWE-926
Improper Export of Android Application Components