Unsecured Broadcast Receiver in Bluebird Devices Exposes File Overwriting Vulnerability

CVE-2025-5346

What is CVE-2025-5346?

The Bluebird barcode scanner application has a critical security flaw due to an unsecured broadcast receiver, which allows local attackers to exploit the system. Attackers can leverage this vulnerability to overwrite files containing the '.json' keyword using a default barcode configuration file. This issue stems from a lack of protection against path traversal, permitting attackers to specify arbitrary locations for file manipulation. All versions prior to 1.3.3 are affected, rendering them susceptible to potential misuse.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References