Approved changes feed: RSS · Atom

cpe:2.3:a:bluebird:com.bluebird.kiosk.launcher:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBluebird (cab0a6fe-770c-5314-8d27-c9761ab135b9)
ProductCom.Bluebird.Kiosk.Launcher (28d36f91-81fc-5a62-b819-372eed9cae6a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5344 vulnerable 2026-06-08 07:35:24.711332 Exposed AIDL service allowing for tampering of system secure settings in Bluebird kiosk application
Bluebird devices contain a pre-loaded kiosk application. This application exposes an unsecured service provider "com.bluebird.kiosk.launcher.IpartnerKioskRemoteService". A local attacker can bind to the AIDL-type service to modify device's global settings and wallpaper image. This issue affects all versions before 1.1.2.
Published: 2025-07-17T12:45:52.289Z
Updated: 2025-07-17T13:48:07.955Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.