PT-2025-35374 · Thinkyeah · Galleryvault

Fxizenta · Published 2025-08-30 · Updated 2025-08-30 · CVE-2025-9695

Positive Technologies · (AI Summary)

CVSS v3.1

5.3

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions:

GalleryVault Gallery Vault App versions up to 4.5.2

Description:

A vulnerability exists in GalleryVault Gallery Vault App on Android, related to improper export of android application components due to an issue with the file `AndroidManifest.xml` of the component `com.thinkyeah.galleryvault`. The attack can only be performed locally. The exploit is publicly available.

Recommendations:

Update GalleryVault Gallery Vault App to a version later than 4.5.2.

Exploit

Fix

Weakness Enumeration

CWE-926

Related Identifiers

CVE-2025-9695

Affected Products

Galleryvault

References · 7

• 🔥 https://github.com/KMov-g/androidapps/blob/main/com.thinkyeah.galleryvault.md#steps-to-reproduce · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-9695 · Security Note
• https://github.com/KMov-g/androidapps/blob/main/com.thinkyeah.galleryvault.md · Note
• https://twitter.com/CVEnew/status/1961818854541177245 · Twitter Post
• https://vuldb.com/?ctiid.321906 · Note
• https://vuldb.com/?submit.639039 · Note
• https://vuldb.com/?id.321906 · Note