Boletines de Vulnerabilidades

CVE-2025-50861

   
Software afectado ANDROID
 
The Lotus Cars Android app (com.lotus.carsdomestic.intl) 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-50861