Weakness (CWE)
CWE-926: Improper Export of Android Application Components
The Android application exports a component for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains.
How to prevent it (4 mitigations)
-
Build and Compilation
If they do not need to be shared by other applications, explicitly mark components with android:exported="false" in the application manifest.
-
Build and Compilation
If you only intend to use exported components between related apps under your control, use android:protectionLevel="signature" in the xml manifest to restrict access to applications signed by you.
-
Build and Compilation, Architecture and Design
Limit Content Provider permissions (read/write) as appropriate.
-
Build and Compilation, Architecture and Design
Limit Content Provider permissions (read/write) as appropriate.
Source: MITRE CWE-926
119 results · Feed
-
Medium 5.3
Foresight News App pro.foresightnews.appa AndroidManifest.xml improper export of android application components
A vulnerability classified as problematic was found in Foresight News App up to 2.6.4 on Android. This vulnerability affects unknown code of the file AndroidManifest.xml of the component pro.foresightnews.appa. The manipulation leads to improper export of and…
-
Medium 5.3CVE-2025-7892 Public exploit
IDnow App de.idnow AndroidManifest.xml improper export of android application components
A vulnerability classified as problematic has been found in IDnow App up to 9.6.0 on Android. This affects an unknown part of the file AndroidManifest.xml of the component de.idnow. The manipulation leads to improper export of android application components. …
-
Medium 5.3
InstantBits Web Video Cast App com.instantbits.cast.webvideo AndroidManifest.xml improper export of android application components
A vulnerability was found in InstantBits Web Video Cast App up to 5.12.4 on Android. It has been rated as problematic. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.instantbits.cast.webvideo. The man…
-
Medium 5.3
Dunamu StockPlus App com.dunamu.stockplus AndroidManifest.xml improper export of android application components
A vulnerability was found in Dunamu StockPlus App up to 7.62.10 on Android. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.dunamu.stockplus. The manipulation…
-
Medium 5.3
CallApp Caller ID App caller.id.phone.number.block AndroidManifest.xml improper export of android application components
A vulnerability was found in CallApp Caller ID App up to 2.0.4 on Android. It has been classified as problematic. Affected is an unknown function of the file AndroidManifest.xml of the component caller.id.phone.number.block. The manipulation leads to improper…
-
Medium 5.1
File removal via path traversal in unsecured broadcast receiver in Bluebird barcode scanner application
Bluebird devices contain a pre-loaded barcode scanner application. This application exposes an unsecured broadcast receiver "kr.co.bluebird.android.bbsettings.BootReceiver". A local attacker can call the receiver to overwrite file containing ".json" keyword w…
-
High 8.5
Exposed AIDL service allowing for tampering of system secure settings in Bluebird kiosk application
Bluebird devices contain a pre-loaded kiosk application. This application exposes an unsecured service provider "com.bluebird.kiosk.launcher.IpartnerKioskRemoteService". A local attacker can bind to the AIDL-type service to modify device's global settings and…
-
Medium 6.3
Exposed AIDL service allowing to read and delete files with system-level privileges in Bluebird filemanager application
Bluebird devices contain a pre-loaded file manager application. This application exposes an unsecured service provider "com.bluebird.system.koreanpost.IsdcardRemoteService". A local attacker can bind to the AIDL-type service to copy and delete arbitrary files…
-
High 8.3
Intent Injection in Kruger&Matz AppLock application
An application "com.pri.applock", which is pre-loaded on Kruger&Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by using biometric data. Exposed ”com.pri.applock.LockUI“ activity allows any other malicious applicatio…
-
Medium 6.9
Exposure of Applications' Encryption PINs in Kruger&Matz AppLock
An application "com.pri.applock", which is pre-loaded on Kruger&Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by using biometric data. Exposed ”com.android.providers.settings.fingerprint.PriFpShareProvider“ content…
-
Medium 6.9
Unrestricted Access to Exported Service in com.pri.factorytest
Android based smartphones from vendors such as Ulefone and Krüger&Matz contain "com.pri.factorytest" application preloaded onto devices during manufacturing process. The application "com.pri.factorytest" (version name: 1.0, version code: 1) exposes a ”com.pri…
-
Medium 6.5
Element X Android vulnerable to loading malicious web pages via received intent
Element X Android is a Matrix Android Client provided by element.io. Prior to version 25.04.2, a crafted hyperlink on a webpage, or a locally installed malicious app, can force Element X up to version 25.04.1 to load a webpage with similar permissions to Elem…
-
Medium 5.5
Improper access control in Sticker Center prior to SMR Apr-2025 Release 1 allows local attackers to access image files …
-
Medium 6.5CVE-2024-36437 Public exploit
The com.enflick.android.TextNow (aka TextNow: Call + Text Unlimited) application 24.17.0.2 for Android enables any inst…
-
Medium 4.3
Cross Application Scripting in Redlink SDK
Cross Application Scripting vulnerability in Vercom S.A. Redlink SDK in specific situations allows local code injection and to manipulate the view of a vulnerable application.This issue affects Redlink SDK versions through 1.13.
-
Low 2.8
An improper export vulnerability was reported in the Motorola Enterprise MotoDpms Provider (com.motorola.server.enterpr…
-
Medium 4.4
An improper export vulnerability was reported in the Motorola Phone Extension application, that could allow a local att…
-
Medium 4.8
An improper export vulnerability was reported in the Motorola Interface Test Tool application that could allow a malici…
-
Medium 5.0
A an improper export vulnerability was reported in the Motorola Setup application that could allow a local attacker to …
-
Medium 5.0
An improper export vulnerability was reported in the Motorola Services Main application that could allow a local attack…
-
Low 3.9
MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service
The MSAL library enabled acquisition of security tokens to call protected APIs. MSAL.NET applications targeting Xamarin Android and .NET Android (e.g., MAUI) using the library from versions 4.48.0 to 4.60.0 are impacted by a low severity vulnerability. A mali…
-
Medium 5.3
kyivstarteam react-native-sms-user-consent SmsUserConsentModule.kt registerReceiver improper export of android application components
A vulnerability, which was classified as critical, has been found in kyivstarteam react-native-sms-user-consent up to 1.1.4 on Android. Affected by this issue is the function registerReceiver of the file android/src/main/java/ua/kyivstar/reactnativesmsusercon…
-
Medium 5.0
An improper export vulnerability was reported in the Motorola Carrier Services application that could allow a malicious…
-
Medium 5.1
An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, loc…
-
High 7.1
The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provider unsafel…
-
Low 3.6
Messaging - Gaining access to arbitrary content providers via QClipIntentReceiverActivity
The vulnerability is that the Messaging ("com.android.mms") app patched by LG forwards attacker-controlled intents back to the attacker in the exported "com.android.mms.ui.QClipIntentReceiverActivity" activity. The attacker can abuse this functionality by lau…
-
Medium 5.0
LG ThinQ Service - Intent redirection with system privilege/LaunchAnyWhere
The vulnerability is an intent redirection in LG ThinQ Service ("com.lge.lms2") in the "com/lge/lms/things/ui/notification/NotificationManager.java" file. This vulnerability could be exploited by a third-party app installed on an LG device by sending a broadc…
-
Medium 5.3
Improper export of android application components vulnerability in ImagePreviewActivity in Call Settings to SMR May-202…
-
Medium 5.3
Improper export of android application components vulnerability in VideoPreviewActivity in Call Settings to SMR May-202…
-
Medium 5.5
In getSliceEndItem of MediaVolumePreferenceController.java, there is a possible way to start foreground activity from t…
-
Medium 4.1
Unprotected Activity in AppLock prior to SMR Mar-2022 Release 1 allows attacker to change the list of locked app withou…
-
Low 3.8
Improper export of Android application components vulnerability in Samsung Pay (India only) prior to version 4.1.77 all…
-
Medium 4.0
Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute priv…
-
Unscored —
Intent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows attacker to execute privileged a…
-
Medium 4.0
Intent redirection vulnerability in PhotoTable prior to SMR MAY-2021 Release 1 allows attackers to execute privileged a…
-
Medium 4.0
Intent redirection vulnerability in Secure Folder prior to SMR MAY-2021 Release 1 allows attackers to execute privilege…
-
Medium 6.8
An improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows local attackers to write…
-
High 7.1
Improper caller check vulnerability in Knox Core prior to SMR MAY-2021 Release 1 allows attackers to install arbitrary …
-
Medium 4.0
Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action.