VYPR

Bluebird devices

by Bluebird

CVEs (1)

  • CVE-2025-5344HigJul 17, 2025
    risk 0.55cvss epss 0.00

    Bluebird devices contain a pre-loaded kiosk application. This application exposes an unsecured service provider "com.bluebird.kiosk.launcher.IpartnerKioskRemoteService". A local attacker can bind to the AIDL-type service to modify device's global settings and wallpaper image. This issue affects all versions before 1.1.2.