Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
1.9
CVE-2025-8524: Boquan DotWallet App on Android Exposes Internal Components
CVE-2025-8524 · published 1 year ago
Summary
The Boquan DotWallet App on Android may allow an attacker to access internal app components if exploited. This could potentially lead to unauthorized access or data theft. Users should update their app to the latest version to fix this issue.
Original advisory text
A vulnerability was found in Boquan DotWallet App 2.15.2 on Android and classified as problematic. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the compon...
A vulnerability was found in Boquan DotWallet App 2.15.2 on Android and classified as problematic. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.boquanhash.dotwallet. The manipulation leads to improper export of android application components. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
1.9
Low
Type
CWE-926Improper Export of Android Application Components
Timeline
Published4 Aug 2025
Updated26 Oct 2026
First seen7 Mar 2026
Sources
CVE-2025-8524 · NVD
Track software like this
Free during beta