PT-2025-35321 · Unknown · Modo Legend Of The Phoenix

Fxizenta · Published 2025-08-29 · Updated 2025-09-02 · CVE-2025-9677

Positive Technologies · (AI Summary)

CVSS v3.1

5.3

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions:

Modo Legend of the Phoenix versions through 1.0.5

Description:

A security flaw exists in Modo Legend of the Phoenix due to improper export of android application components. The affected element is a function within the `AndroidManifest.xml` file of the `com.duige.hzw.multilingual` component. The attack requires local access. The exploit has been publicly released. The vendor was contacted but did not respond.

Recommendations:

Update Modo Legend of the Phoenix to a version beyond 1.0.5.

Exploit

Fix

Weakness Enumeration

CWE-926

Related Identifiers

CVE-2025-9677

Affected Products

Modo Legend Of The Phoenix

References · 9

• 🔥 https://github.com/KMov-g/androidapps/blob/main/com.duige.hzw.multilingual.md · Exploit
• 🔥 https://github.com/KMov-g/androidapps/blob/main/com.duige.hzw.multilingual.md#steps-to-reproduce · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-9677 · Security Note
• https://vuldb.com/?ctiid.321889 · Note
• https://t.me/CVEtracker/31290 · Telegram Post
• https://t.me/cveNotify/134090 · Telegram Post
• https://twitter.com/CVEnew/status/1961541537051054590 · Twitter Post
• https://vuldb.com/?submit.638078 · Note
• https://vuldb.com/?id.321889 · Note