The flaw resides in the TokenBalanceContentProvider function of the org.ethereumphone.walletmanager.testing123 component. An attacker with local access can manipulate requests to this function and obtain unauthorized authorization, effectively bypassing intended access controls and gaining privileged access to token balance information. The vulnerability stems from insufficient permission validation, corresponding to privilege management weaknesses.

Freedom Factory dGEN1 devices up to the build date 20260221 are affected. All earlier releases using the org.ethereumphone.walletmanager.testing123 component are potentially vulnerable; no additional version detail beyond the last known build date is provided.

The vulnerability has a CVSS score of 4.8, indicating moderate severity. The EPSS score is under 1 %, suggesting a low probability of exploitation at this time. It is not listed in the CISA KEV catalog, meaning there are no confirmed widespread attacks. The attack vector is local; an attacker must already have physical or local network access to the device to trigger the improper authorization. Given the moderate severity but low exploitation likelihood, the overall risk is considered moderate but should not be ignored, especially in environments with unattended devices.