PT-2025-38581 · Ooma · Office Business Phone App

Fxizenta · Published 2025-09-19 · Updated 2025-09-19 · CVE-2025-10718

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Ooma Office Business Phone App versions up to 7.2.2

Description A vulnerability exists in the com.ooma.office2 component of the Ooma Office Business Phone App on Android. The issue involves improper export of Android application components, potentially allowing for local exploitation. The exploit has been publicly released.

Recommendations Update Ooma Office Business Phone App to a version later than 7.2.2.

Exploit

Fix

Weakness Enumeration

CWE-926

Related Identifiers

CVE-2025-10718

Affected Products

Office Business Phone App

References · 7

• 🔥 https://github.com/KMov-g/androidapps/blob/main/com.ooma.office2.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10718 · Security Note
• https://twitter.com/CVEnew/status/1969110850696069327 · Twitter Post
• https://vuldb.com/?id.325009 · Note
• https://twitter.com/VulmonFeeds/status/1969166373159895325 · Twitter Post
• https://vuldb.com/?ctiid.325009 · Note
• https://vuldb.com/?submit.645012 · Note