CVE-2025-8257

Summary

A vulnerability classified as problematic was found in Lobby Universe Lobby App up to 2.8.0 on Android. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.maverick.lobby. The manipulation leads to improper export of android application components. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Affected Software

VendorProductVersion RangeStatus
Lobby UniverseLobby App2.0affected
Lobby UniverseLobby App2.1affected
Lobby UniverseLobby App2.2affected
Lobby UniverseLobby App2.3affected
Lobby UniverseLobby App2.4affected
Lobby UniverseLobby App2.5affected
Lobby UniverseLobby App2.6affected
Lobby UniverseLobby App2.7affected
Lobby UniverseLobby App2.8.0affected

Weaknesses

  • CWE-926: Improper Export of Android Application Components

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: no
    • Technical Impact: partial

References