PT-2025-35321 · Unknown · Modo Legend Of The Phoenix

Fxizenta · Published 2025-08-29 · Updated 2025-09-02 · CVE-2025-9677

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Modo Legend of the Phoenix versions through 1.0.5

Description A security flaw exists in Modo Legend of the Phoenix due to improper export of android application components. The affected element is a function within the AndroidManifest.xml file of the com.duige.hzw.multilingual component. The attack requires local access. The exploit has been publicly released. The vendor was contacted but did not respond.

Recommendations Update Modo Legend of the Phoenix to a version beyond 1.0.5.

Exploit

Fix

Weakness Enumeration

CWE-926

Related Identifiers

CVE-2025-9677

Affected Products

Modo Legend Of The Phoenix

References · 10

• 🔥 https://github.com/KMov-g/androidapps/blob/main/com.duige.hzw.multilingual.md#steps-to-reproduce · Exploit
• 🔥 https://github.com/KMov-g/androidapps/blob/main/com.duige.hzw.multilingual.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-9677 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9677 · Security Note
• https://vuldb.com/?ctiid.321889 · Note
• https://twitter.com/CVEnew/status/1961541537051054590 · Twitter Post
• https://vuldb.com/?id.321889 · Note
• https://t.me/cveNotify/134090 · Telegram Post
• https://t.me/CVEtracker/31290 · Telegram Post
• https://vuldb.com/?submit.638078 · Note