CVE-2025-9677
📋 TL;DR
This vulnerability allows local attackers to exploit improperly exported Android application components in Modo Legend of the Phoenix mobile game. The flaw enables unauthorized access to app components that should be protected. Only users running versions up to 1.0.5 on Android devices are affected.
💻 Affected Systems
- Modo Legend of the Phoenix
📦 What is this software?
⚠️ Risk & Real-World Impact
Worst Case
Local attackers could gain unauthorized access to sensitive app data, manipulate game state, or potentially escalate privileges within the app context.
Likely Case
Malicious apps on the same device could interact with the vulnerable app components to read/modify game data or perform unauthorized actions.
If Mitigated
With proper Android security controls and app sandboxing, impact is limited to the app's own data and permissions.
🎯 Exploit Status
Exploit details publicly available on GitHub. Requires local access to device (malicious app or physical access).
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Unknown
Vendor Advisory: None available
Restart Required: No
Instructions:
No official patch available. Vendor did not respond to disclosure. Consider uninstalling the app until fixed.
🔧 Temporary Workarounds
Uninstall vulnerable app
androidRemove the vulnerable application from Android devices
adb uninstall com.duige.hzw.multilingual
Restrict app installation
androidPrevent installation of unknown apps that could exploit the vulnerability
Settings > Security > Unknown Sources (disable)
🧯 If You Can't Patch
- Isolate device from sensitive data and networks
- Monitor for suspicious app behavior or unexpected game state changes
🔍 How to Verify
Check if Vulnerable:
Check app version in Google Play Store or app settings. If version is 1.0.5 or lower, app is vulnerable.Check Version:
adb shell dumpsys package com.duige.hzw.multilingual | grep versionNameVerify Fix Applied:
Verify app has been updated to version above 1.0.5 or has been removed from device.📡 Detection & Monitoring
Log Indicators:
- Unexpected intents or component access in Android logs
- App crashes or unexpected behavior from Modo Legend of the Phoenix
Network Indicators:
- None - local exploit only
SIEM Query:
Not applicable for local Android app vulnerability🔗 References
- https://github.com/KMov-g/androidapps/blob/main/com.duige.hzw.multilingual.md
- https://github.com/KMov-g/androidapps/blob/main/com.duige.hzw.multilingual.md#steps-to-reproduce
- https://vuldb.com/?ctiid.321889
- https://vuldb.com/?id.321889
- https://vuldb.com/?submit.638078
- https://github.com/KMov-g/androidapps/blob/main/com.duige.hzw.multilingual.md
- https://github.com/KMov-g/androidapps/blob/main/com.duige.hzw.multilingual.md#steps-to-reproduce
