File Manager Application Vulnerability in Bluebird Devices
CVE-2025-5345

6.3MEDIUM

Key Information:

Vendor

Bluebird

Status
Com.bluebird.filemanagers
Vendor
CVE Published:
17 July 2025

What is CVE-2025-5345?

A file manager application pre-installed on Bluebird devices exposes an insecure service that enables local attackers to leverage the AIDL-type service. This vulnerability allows unauthorized access to device storage, enabling the attacker to copy or delete files with elevated permissions.

Affected Version(s)

com.bluebird.filemanagers Android 1.4.4

com.bluebird.filemanagers Android 0

References

https://cert.pl/en/posts/2025/07/CVE-2025-5344
third-party-advisory

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Szymon Chadam
.
CVE-2025-5345 : File Manager Application Vulnerability in Bluebird Devices