high8.5
CVE-2025-5344
Bluebird devices contain a pre-loaded kiosk application.
Impact
Bluebird devices contain a pre-loaded kiosk application. This application exposes an unsecured service provider "com.bluebird.kiosk.launcher.IpartnerKioskRemoteService". A local attacker can bind to the AIDL-type service to modify device's global settings and wallpaper image. This issue affects all versions before 1.1.2.
Affected products
| Product | Affected versions |
|---|---|
| All | before 1.1.2. |
Versions were read from the advisory text. No structured product data has been published for this record yet.