PT-2025-35310 · Kakao · Kakao Hey Kakao App

Fxizenta · Published 2025-08-29 · Updated 2025-08-29 · CVE-2025-9673

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Kakao Hey Kakao App versions up to 2.17.4

Description A vulnerability exists in the Kakao Hey Kakao App on Android, affecting an unknown functionality within the AndroidManifest.xml file of the com.kakao.i.connect component. This issue results in improper export of Android application components and requires a local attack approach. The exploit is publicly available.

Recommendations Update Kakao Hey Kakao App to a version later than 2.17.4.

Exploit

Fix

Weakness Enumeration

CWE-926

Related Identifiers

CVE-2025-9673

Affected Products

Kakao Hey Kakao App

References · 8

• 🔥 https://github.com/KMov-g/androidapps/blob/main/com.kakao.i.connect.md#steps-to-reproduce · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-9673 · Security Note
• https://github.com/KMov-g/androidapps/blob/main/com.kakao.i.connect.md · Note
• https://t.me/CVEtracker/31284 · Telegram Post
• https://vuldb.com/?ctiid.321883 · Note
• https://twitter.com/CVEnew/status/1961527529908363387 · Twitter Post
• https://vuldb.com/?submit.637925 · Note
• https://vuldb.com/?id.321883 · Note