Unsecured Broadcast Receiver in Bluebird Devices Exposes File Overwriting Vulnerability

CVE-2025-5346

What is CVE-2025-5346?

The Bluebird barcode scanner application has a critical security flaw due to an unsecured broadcast receiver, which allows local attackers to exploit the system. Attackers can leverage this vulnerability to overwrite files containing the '.json' keyword using a default barcode configuration file. This issue stems from a lack of protection against path traversal, permitting attackers to specify arbitrary locations for file manipulation. All versions prior to 1.3.3 are affected, rendering them susceptible to potential misuse.

References