PT-2025-31859 · Android+1 · Android+1

Fxizenta · Published 2025-08-04 · Updated 2025-08-05 · CVE-2025-8523

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions RiderLike Fruit Crush-Brain App version 1.0

Description A vulnerability exists in RiderLike Fruit Crush-Brain App version 1.0 on Android due to improper export of android application components within the AndroidManifest.xml file of the com.fruitcrush.fun component. This allows for launching an attack on the local host. The exploit has been publicly disclosed, and the vendor was notified but did not respond.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-926

Related Identifiers

CVE-2025-8523

Affected Products

Android

Riderlike Fruit Crush-Brain App

References · 8

• 🔥 https://github.com/KMov-g/androidapps/blob/main/com.fruitcrush.fun.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-8523 · Security Note
• https://vuldb.com/?submit.619035 · Note
• https://t.me/CVEtracker/29125 · Telegram Post
• https://twitter.com/CVEnew/status/1952454938346369487 · Twitter Post
• https://vuldb.com/?id.318649 · Note
• https://twitter.com/VulmonFeeds/status/1952533255397195902 · Twitter Post
• https://vuldb.com/?ctiid.318649 · Note