PT-2025-35310 · Kakao · Kakao Hey Kakao App

Fxizenta · Published 2025-08-29 · Updated 2025-08-29 · CVE-2025-9673

Positive Technologies · (AI Summary)

CVSS v3.1

5.3

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions:

Kakao Hey Kakao App versions up to 2.17.4

Description:

A vulnerability exists in the Kakao Hey Kakao App on Android, affecting an unknown functionality within the `AndroidManifest.xml` file of the `com.kakao.i.connect` component. This issue results in improper export of Android application components and requires a local attack approach. The exploit is publicly available.

Recommendations:

Update Kakao Hey Kakao App to a version later than 2.17.4.

Exploit

Fix

Weakness Enumeration

CWE-926

Related Identifiers

CVE-2025-9673

Affected Products

Kakao Hey Kakao App

References · 8

• 🔥 https://github.com/KMov-g/androidapps/blob/main/com.kakao.i.connect.md#steps-to-reproduce · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-9673 · Security Note
• https://github.com/KMov-g/androidapps/blob/main/com.kakao.i.connect.md · Note
• https://vuldb.com/?submit.637925 · Note
• https://twitter.com/CVEnew/status/1961527529908363387 · Twitter Post
• https://vuldb.com/?id.321883 · Note
• https://t.me/CVEtracker/31284 · Telegram Post
• https://vuldb.com/?ctiid.321883 · Note