CVE-2025-8210 | Yeelink Yeelight App up to 3.5.4 on Android com.yeelight.cherry AndroidManifest.xml improper export of android application components

July 25, 2025 Yanac

A vulnerability was found in Yeelink Yeelight App up to 3.5.4 on Android. It has been classified as problematic. Affected is an unknown function of the file AndroidManifest.xml of the component com.yeelight.cherry. The manipulation leads to improper export of android application components.

This vulnerability is traded as CVE-2025-8210. Attacking locally is a requirement. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More