CVE-2025-5344

Bluebird devices contain a pre-loaded kiosk application. This application exposes an unsecured service provider “com.bluebird.kiosk.launcher.IpartnerKioskRemoteService”. A local attacker can bind to the AIDL-type service to modify device’s global settings and wallpaper image.

This issue affects all versions before 1.1.2.

Assigner : cvd@cert.pl

More information : https://cert.pl/en/posts/2025/07/CVE-2025-5344