Improper Export Vulnerability in APEUni PTE Exam Practice App for Android
CVE-2025-10715

4.8MEDIUM

Key Information:

Vendor

Apeuni

Status
Pte Exam Practice App
Vendor
CVE Published:
19 September 2025

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-10715?

A vulnerability has been identified in the APEUni PTE Exam Practice App on Android, specifically in the AndroidManifest.xml file of the com.ape_edication component. This flaw permits the improper export of application components, potentially allowing malicious local actors to manipulate the app's behavior. The exploit, which is publicly available, poses a significant risk as it can be utilized without vendor acknowledgment or response following the initial disclosure.

Affected Version(s)

PTE Exam Practice App 10.0

PTE Exam Practice App 10.1

PTE Exam Practice App 10.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-10715 - Proof of Concept

References

https://vuldb.com/?id.325003
vdb-entry
https://vuldb.com/?ctiid.325003
signaturepermissions-required
https://vuldb.com/?submit.645006
third-party-advisory

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

fxizenta (VulDB User)
.
CVE-2025-10715 : Improper Export Vulnerability in APEUni PTE Exam Practice App for Android