CVE-2025-5345 - CVE House
Back to Database
Status published Medium CVE-2025-5345

Exposed AIDL service allowing to read and delete files with system-level privileges in Bluebird filemanager application

Vulnerability Description

Bluebird devices contain a pre-loaded file manager application. This application exposes an unsecured service provider "com.bluebird.system.koreanpost.IsdcardRemoteService". A local attacker can bind to the AIDL-type service to copy and delete arbitrary files from device's storage with system-level permissions. Version 1.4.4 is vulnerable, vendor reverted vulnerable versions to older version: 1.3.6

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-5345

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Szymon Chadam

References

More from Bluebird

View All →
CVE-2025-5346
File removal via path traversal in unsecured broadcast receiver in Bluebird barcode scanner application
Medium 5.1
CVE-2025-5344
Exposed AIDL service allowing for tampering of system secure settings in Bluebird kiosk application
High 8.5

Affected Vendor

Affected Software

com.bluebird.filemanagers
Vulnerable Versions:
1.4.4, 0

Timeline

Official Publish: July 17th, 2025
Last Modified: July 17th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-926

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.