CVE-2025-69515

CriticalCVSS 9.1/10Last modified Jul 24, 2026

Description

An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to force the infotainment system into accepting falsified GPS signals as legitimate, resulting in the device reporting an incorrect or static location.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-941

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published: Apr 7, 2026
Last modified: Jul 24, 2026
NVD status: Awaiting Analysis

Related CVEs from 2025

CVE-2025-695168.8A Server-Side Template Injection (SSTI) vulnerability in the /reporting/templates/preview/ endpoint of Amidaware Tactical RMM, affecting ver CVE-2025-695178.8An HTML injection vulnerability in Amidaware Inc Tactical RMM v1.3.1 and earlier allows authenticated users to inject arbitrary HTML content CVE-2025-69523.3A vulnerability, which was classified as problematic, has been found in Open5GS up to 2.7.5. This issue affects the function amf_state_opera CVE-2025-69538.8A vulnerability, which was classified as critical, was found in TOTOLINK A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of th CVE-2025-695347.5Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandl CVE-2025-69549.8A vulnerability has been found in Campcodes Employee Management System 1.0 and classified as critical. Affected by this vulnerability is an CVE-2025-695429.8A Command Injection Vulnerability has been discovered in the DHCP daemon service of D-Link DIR895LA1 v102b07. The vulnerability exists in th CVE-2025-69559.8A vulnerability was found in Campcodes Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown fun CVE-2025-695599.8code-projects Computer Book Store 1.0 is vulnerable to File Upload in admin_add.php.CVE-2025-69569.8A vulnerability was found in Campcodes Employee Management System 1.0. It has been classified as critical. This affects an unknown part of t CVE-2025-695629.8code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /insertmessage.php via the userid parameter.CVE-2025-695639.8code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExLogin.php via the Password parameter.