Vulnerability · Published Aug 18, 2025 · Assigned by VulDB
CVE-2025-91021&1 Mail & Media mail.com App com.mail.mobile.android.mail AndroidManifest.xml improper export of android application components
Medium 5.3
In plain English
A medium-severity security flaw in mail.com App from 1&1 Mail & Media. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).
Official description
A security vulnerability has been detected in 1&1 Mail & Media mail.com App 8.8.0 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component com.mail.mobile.android.mail. The manipulation leads to improper export of android application components. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| 1&1 Mail & Media | mail.com App | 8.8.0 |
Weakness: CWE-926 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-320424 | 1&1 Mail & Media mail.com App com.mail.mobile.android.mail AndroidManifest.xml improper export of android application components vdb-entry
- VDB-320424 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #628264 | 1&1 Mail & Media Inc mail.com(com.mail.mobile.android.mail) 8.8.0 Task Hijacking third-party-advisory
- https://github.com/KMov-g/androidapps/blob/main/com.mail.mobile.android.mail.md related
- https://github.com/KMov-g/androidapps/blob/main/com.mail.mobile.android.mail.md#steps-to-reproduce exploit