PT-2025-30195 · Idnow · Idnow App

Fxizenta · Published 2025-07-20 · Updated 2025-07-21 · CVE-2025-7892

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IDnow App versions up to 9.6.0

Description A problematic issue has been identified in the IDnow App for Android, potentially leading to improper export of Android application components due to manipulation of the AndroidManifest.xml file within the de.idnow component. Local access is required for exploitation. The details of the issue have been publicly disclosed, and the vendor was informed but did not respond.

Recommendations Update to a version beyond 9.6.0.

Exploit

Fix

Weakness Enumeration

CWE-926

Related Identifiers

CVE-2025-7892

Affected Products

Idnow App

References · 11

• 🔥 https://github.com/KMov-g/androidapps/blob/main/de.idnow.md · Exploit
• 🔥 https://github.com/KMov-g/androidapps/blob/main/de.idnow.md#steps-to-reproduce · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-7892 · Security Note
• https://osv.dev/vulnerability/CVE-2025-7892 · Vendor Advisory
• https://t.me/cvetracker/28268 · Telegram Post
• https://vuldb.com/?ctiid.317007 · Note
• https://vuldb.com/?id.317007 · Note
• https://t.me/cvenotify/129605 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1946946491924242797 · Twitter Post
• https://vuldb.com/?submit.615279 · Note
• https://t.me/cvenotify/129678 · Telegram Post