Skip to content
OpenAdvisories

Vendor

Yalantis

2 known vulnerabilities.

Products

uCrop 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-14517

    Yalantis uCrop AndroidManifest.xml UCropActivity  improper export of android application components

    A vulnerability was determined in Yalantis uCrop 2.2.11. This affects the function UCropActivity  of the file AndroidManifest.xml. Executing manipulation can lead to improper export of android application components. The attack can only be executed locally. T…

    Yalantis uCrop
  • Medium 6.3
    CVE-2025-14516

    Yalantis uCrop URL com.yalantis.ucrop.task.BitmapLoadTask.java downloadFile server-side request forgery

    A vulnerability was found in Yalantis uCrop 2.2.11. Affected by this issue is the function downloadFile of the file com.yalantis.ucrop.task.BitmapLoadTask.java of the component URL Handler. Performing manipulation results in server-side request forgery. The a…

    Yalantis uCrop