Yeelight App Android CVE-2025-8210

Update Yeelight App to a version after 3.5.4 if available; however, vendor non-responsiveness suggests patched versions may not be released. As a primary mitigation, uninstall or disable the Yeelight App if not actively required, particularly on devices that may be shared or have elevated security concerns. If continued use is necessary, restrict application installation permissions on the Android device by enabling 'Unknown sources' restriction in Settings and limiting which apps can install other applications. Monitor device access logs for suspicious inter-process communication attempts targeting com.yeelight.cherry. Users should ensure device lock screen protections (PIN/biometric) are enabled to prevent local physical access exploitation. Since vendor response is non-existent per disclosure timeline, users should document this vulnerability in internal asset inventories and monitor for any future vendor security updates, though reliance on vendor patches is not recommended.