CVE-2026-13514
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Chess Play and Learn App com.chess AndroidManifest.xml backup
A weakness has been identified in Chess Play and Learn App up to 4.9.42 on Android. This issue affects some unknown processing of the file AndroidManifest.xml of the component com.chess. This manipulation causes exposure of backup file to an unauthorized control sphere. It is feasible to perform the attack on the physical device. The exploit has been made available to the public and could be used for attacks. Upgrading the affected component is advised. The vendor was informed early about this issue. They confirmed the existence and that they will address it. Furthermore, they explain that their bug bounty "explicitly excludes physical-access attacks". However, they appreciate the quality of the report and aim at making a goodwill payment to the researcher.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Play and Learn App
- Vendor
- Chess
- Product
- Play and Learn App
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.9.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.3 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.4 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.5 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.6 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.7 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.8 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.9 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.10 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.11 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.12 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.13 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.14 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.15 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.16 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.17 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.18 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.19 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.20 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.21 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.22 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.23 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.24 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.25 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.26 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.27 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.28 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.29 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.30 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.31 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.32 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.33 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.34 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.35 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.36 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.37 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.38 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.39 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.40 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.41 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.9.42 | affected | Unavailable | Unavailable | Unavailable | None listed |