Yalantis
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| uCrop | 2 | – | Dec 11, 2025 |
Exploited and recent CVEs
- CVE-2025-14517 Yalantis uCrop AndroidManifest.xml UCropActivity improper export of android application components 0.2%
- CVE-2025-14516 Yalantis uCrop URL com.yalantis.ucrop.task.BitmapLoadTask.java downloadFile server-side request forgery 0.5%