PT-2025-30987 · Yeelink · Com.Yeelight.Cherry+1

Fxizenta · Published 2025-07-26 · Updated 2025-08-26 · CVE-2025-8210

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Yeelink Yeelight App versions up to 3.5.4

Description A vulnerability exists in the Yeelink Yeelight App on Android. The issue involves improper export of android application components due to manipulation of an unknown function within the AndroidManifest.xml file of the com.yeelight.cherry component. Local access is required for exploitation. The exploit details have been publicly disclosed.

Recommendations Yeelink Yeelight App versions prior to 3.5.4 should be updated.

Exploit

Fix

Weakness Enumeration

CWE-926

Related Identifiers

CVE-2025-8210

Affected Products

Yeelight App

Com.Yeelight.Cherry

References · 10

• 🔥 https://github.com/KMov-g/androidapps/blob/main/com.yeelight.cherry.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-8210 · Security Note
• https://osv.dev/vulnerability/CVE-2025-8210 · Vendor Advisory
• https://vuldb.com/?submit.615779 · Note
• https://t.me/cveNotify/133484 · Telegram Post
• https://twitter.com/marcin_brz81183/status/1949379184200945818 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1949225472732041662 · Twitter Post
• https://vuldb.com/?ctiid.317778 · Note
• https://twitter.com/CVEnew/status/1949211495646023788 · Twitter Post
• https://vuldb.com/?id.317778 · Note