CVE-2025-14517 | Yalantis uCrop 2.2.11 AndroidManifest.xml UCropActivity  improper export of android application components

SecurityVulns
Yanac

A vulnerability categorized as problematic has been discovered in Yalantis uCrop 2.2.11. This affects the function UCropActivity  of the file AndroidManifest.xml. Executing manipulation can lead to improper export of android application components.

The identification of this vulnerability is CVE-2025-14517. The attack can only be executed locally. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More