PT-2025-30194 · Instantbits · Instantbits Web Video Cast App

Fxizenta · Published 2025-07-20 · Updated 2025-07-21 · CVE-2025-7891

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions InstantBits Web Video Cast App versions up to 5.12.4

Description A vulnerability exists in the InstantBits Web Video Cast App for Android, related to the improper export of android application components through manipulation of the AndroidManifest.xml file within the com.instantbits.cast.webvideo component. The issue is locally exploitable and has been publicly disclosed. The vendor was notified but did not respond.

Recommendations Update InstantBits Web Video Cast App to a version newer than 5.12.4.

Exploit

Fix

Weakness Enumeration

CWE-926

Related Identifiers

CVE-2025-7891

Affected Products

Instantbits Web Video Cast App

References · 11

• 🔥 https://github.com/KMov-g/androidapps/blob/main/com.instantbits.cast.webvideo.md · Exploit
• 🔥 https://github.com/KMov-g/androidapps/blob/main/com.instantbits.cast.webvideo.md#steps-to-reproduce · Exploit
• https://osv.dev/vulnerability/CVE-2025-7891 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-7891 · Security Note
• https://twitter.com/VulmonFeeds/status/1946928564965695684 · Twitter Post
• https://vuldb.com/?submit.615271 · Note
• https://t.me/cvenotify/129604 · Telegram Post
• https://vuldb.com/?ctiid.317006 · Note
• https://t.me/cvenotify/129677 · Telegram Post
• https://vuldb.com/?id.317006 · Note
• https://t.me/cvetracker/28267 · Telegram Post