CVE-2025-10717
A vulnerability has been found in intsig CamScanner App 6.91.1.5.250711 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.intsig....
Affects 0 products across 2 vendors.
A vulnerability in intsig CamScanner App 6.91.1.5.250711 on Android allows for improper export of application components due to unknown functionality in AndroidManifest.xml.
BSID: BS-2025-GLOBAL-229095-M • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2025-10717?
What is the CVSS score for CVE-2025-10717?
Is CVE-2025-10717 actively exploited?
How do I remediate CVE-2025-10717?
What systems are affected by CVE-2025-10717?
| CVE ID | CVE-2025-10717 |
|---|---|
| BSID | BS-2025-GLOBAL-229095-M BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
| Published | 2025-09-19 |
| Last Modified | 2026-06-17 |
| ICS Relevance | 0% |
| Weakness (CWE) | |
| Source | NVD |
A vulnerability has been found in intsig CamScanner App 6.91.1.5.250711 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.intsig.camscanner. The manipulation leads to improper export of android application components. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Source: NIST NVD / MITRE CVE Database
The vulnerability can be exploited by a local attacker with access to the device. The attack involves manipulating the AndroidManifest.xml file to improperly export components, which could lead to unauthorized access or manipulation of the application.
Exploitation Likelihood: MEDIUM
No official vendor advisory link on record. See the CVE record →
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
AI Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | MEDIUM |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | dfdedfe5d7891120483539480d4c82146db17bd63c22c04959e9377d99a410c241835dd0731cd77718cfd028e200955b1c424842d2fa41120d484b4e2c048a93 |
ICS/OT Vulnerability Intelligence for Your Environment
BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.
Create a free account →