PT-2025-35374 · Thinkyeah · Galleryvault

Fxizenta · Published 2025-08-30 · Updated 2025-08-30 · CVE-2025-9695

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions GalleryVault Gallery Vault App versions up to 4.5.2

Description A vulnerability exists in GalleryVault Gallery Vault App on Android, related to improper export of android application components due to an issue with the file AndroidManifest.xml of the component com.thinkyeah.galleryvault. The attack can only be performed locally. The exploit is publicly available.

Recommendations Update GalleryVault Gallery Vault App to a version later than 4.5.2.

Exploit

Fix

Weakness Enumeration

CWE-926

Related Identifiers

CVE-2025-9695

Affected Products

Galleryvault

References · 9

• 🔥 https://github.com/KMov-g/androidapps/blob/main/com.thinkyeah.galleryvault.md · Exploit
• 🔥 https://github.com/KMov-g/androidapps/blob/main/com.thinkyeah.galleryvault.md#steps-to-reproduce · Exploit
• https://osv.dev/vulnerability/CVE-2025-9695 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9695 · Security Note
• https://vuldb.com/?ctiid.321906 · Note
• https://t.me/CVEtracker/31338 · Telegram Post
• https://vuldb.com/?submit.639039 · Note
• https://twitter.com/CVEnew/status/1961818854541177245 · Twitter Post
• https://vuldb.com/?id.321906 · Note