Description
A vulnerability was determined in Voice Changer App up to 1.1.0. This issue affects some unknown processing of the file AndroidManifest.xml of the component com.tuyangkeji.changevoice. Executing manipulation can lead to improper export of android application components. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized.
Affected products
voice_changer_project: voice changer; google: android
References7
- github.com/KMov-g/androidapps/blob/main/com.tuyangkeji.changevo… ExploitMitigationThird Party Advisory
- github.com/KMov-g/androidapps/blob/main/com.tuyangkeji.changevo… ExploitMitigationThird Party Advisory
- github.com/KMov-g/androidapps/blob/main/com.tuyangkeji.changevo… ExploitMitigationThird Party Advisory
- github.com/KMov-g/androidapps/blob/main/com.tuyangkeji.changevo… ExploitMitigationThird Party Advisory
- vuldb.com/?ctiid.321887 Permissions RequiredVDB Entry
- vuldb.com/?id.321887 Third Party AdvisoryVDB Entry
- vuldb.com/?submit.638073 Third Party AdvisoryVDB Entry
Metrics
- CVSS 3.1
-
5.5
MEDIUM
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - CVSS 4.0
-
1.9
LOW
Score source: CNA
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS — exploit probability
- 0% percentile: 21 · as of 8 November 2026
- CWE
- CWE-926
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.