CVE-2025-4737

MediumCVSS 6.2/10Last modified Jun 17, 2026

Description

Insufficient encryption vulnerability in the mobile application (com.transsion.aivoiceassistant) may lead to the risk of sensitive information leakage.

Metrics

CVSS 3.1 6.2/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-312

Affected software

No affected versions have been published.

Timeline

Published: May 15, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-473706.5Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.CVE-2025-473716.5Transient DOS when an LTE RLC packet with invalid TB is received by UE.CVE-2025-473728.4Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.CVE-2025-473737.8Memory Corruption when accessing buffers with invalid length during TA invocation.CVE-2025-473746.5Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.CVE-2025-473757.8Memory corruption while handling different IOCTL calls from the user-space simultaneously.CVE-2025-473767.8Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.CVE-2025-473777.8Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.CVE-2025-473787.1Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.CVE-2025-473797.8Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buff CVE-2025-47389.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yirmibes Software MY ERP allows SQL In CVE-2025-473807.8Memory corruption while preprocessing IOCTLs in sensors.