CVE-2025-9695: A vulnerability was identified in GalleryVault Gallery Vault App up to 4.5.2 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.th...

Summary

A vulnerability was identified in GalleryVault Gallery Vault App up to 4.5.2 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.thinkyeah.galleryvault. The manipulation leads to improper export of android application components. The ...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
galleryvault	gallery_vault	<= 4.5.2 `cpe:2.3:a:galleryvault:gallery_vault::::::android::*`

Original advisory text

A vulnerability was identified in GalleryVault Gallery Vault App up to 4.5.2 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.th...

A vulnerability was identified in GalleryVault Gallery Vault App up to 4.5.2 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.thinkyeah.galleryvault. The manipulation leads to improper export of android application components. The attack can only be performed from a local environment. The exploit is publicly available and might be used.

References

https://vuldb.com/?ctiid.321906 Permissions Required VDB Entry
https://vuldb.com/?id.321906 Third Party Advisory VDB Entry
https://vuldb.com/?submit.639039 Third Party Advisory VDB Entry
https://github.com/KMov-g/androidapps/blob/main/com.thinkyeah.galleryvault.md Exploit Third Party Advisory
https://github.com/KMov-g/androidapps/blob/main/com.thinkyeah.galleryvault.md#st... Exploit Third Party Advisory