Vulnerability · Published Jul 28, 2025 · Assigned by VulDB

CVE-2025-8258Cool Mo Maigcal Number App com.sdmagic.number AndroidManifest.xml improper export of android application components

Medium 5.3

In plain English

A medium-severity security flaw in Maigcal Number App from Cool Mo. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.2%top 83.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability, which was classified as problematic, has been found in Cool Mo Maigcal Number App up to 1.0.3 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.sdmagic.number. The manipulation leads to improper export of android application components. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

Affected products (as reported)

Vendor	Product	Versions
Cool Mo	Maigcal Number App	1.0.01.0.11.0.21.0.3

Weakness: CWE-926 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

References

VDB-317846 | Cool Mo Maigcal Number App com.sdmagic.number AndroidManifest.xml improper export of android application components vdb-entry
VDB-317846 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #623472 | Cool mo. Inc Maigcal Number(com.sdmagic.number) 1.0.3 Task Hijacking third-party-advisory
https://github.com/KMov-g/androidapps/blob/main/com.sdmagic.number.md exploit