PT-2025-32339 · Unknown · Com.Huuge.Game.Zjbox+1

Fxizenta · Published 2025-08-08 · Updated 2025-09-16 · CVE-2025-8707

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huuge Box App version 1.0.3

Description A vulnerability exists due to improper export of Android application components within the AndroidManifest.xml file of the com.huuge.game.zjbox component. Local access is required for exploitation. The vulnerability has been publicly disclosed.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict local access to the application.

Exploit

Fix

Weakness Enumeration

CWE-926

Related Identifiers

CVE-2025-8707

Affected Products

Huuge Box App

Com.Huuge.Game.Zjbox

References · 12

• 🔥 https://github.com/KMov-g/androidapps/blob/main/com.huuge.game.zjbox.md#steps-to-reproduce · Exploit
• 🔥 https://github.com/KMov-g/androidapps/blob/main/com.huuge.game.zjbox.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-8707 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8707 · Security Note
• https://twitter.com/CVEnew/status/1953671457931730987 · Twitter Post
• https://t.me/CVEtracker/29490 · Telegram Post
• https://t.me/cveNotify/131373 · Telegram Post
• https://vuldb.com/?submit.619858 · Note
• https://vuldb.com/?id.319137 · Note
• https://t.me/cveNotify/135573 · Telegram Post
• https://vuldb.com/?ctiid.319137 · Note
• https://twitter.com/f8sbrightermind/status/1953680342184763555 · Twitter Post