CVE-2025-8257

Published: Jul 28, 2025Modified: Jun 17, 2026

1.9

Vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: CNA (Secondary)

Description

A vulnerability classified as problematic was found in Lobby Universe Lobby App up to 2.8.0 on Android. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.maverick.lobby. The manipulation leads to improper export of android application components. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Affected (9)

Products: Lobbyuniverse: Lobby

Lobbyuniverse

1 product

Lobby

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Lobbyuniverse Lobby	Version 2.0
Lobbyuniverse Lobby	Version 2.1
Lobbyuniverse Lobby	Version 2.2
Lobbyuniverse Lobby	Version 2.3
Lobbyuniverse Lobby	Version 2.4
Lobbyuniverse Lobby	Version 2.5
Lobbyuniverse Lobby	Version 2.6
Lobbyuniverse Lobby	Version 2.7
Lobbyuniverse Lobby	Version 2.8.0