CVE-2025-69515

CRITICAL

An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to force the infotainment system into accepting falsified GPS signals as legitimate, resulting in the device repo...

Affects 0 products across 1 vendor.

BCS6.31
CVSS 3.19.1
EPSS0.5%
Percentile38th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, no confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-941: CWE-941
◆ SAGE Intelligence — CITED Relevance Research Team

A vulnerability in the JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to inject falsified GPS signals, leading to incorrect location reporting.

BSID: BS-2026-GLOBAL-270048-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2025-69515?
A vulnerability in the JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to inject falsified GPS signals, leading to incorrect location reporting.
What is the CVSS score for CVE-2025-69515?
CVE-2025-69515 has CVSS 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H. EPSS: 0.5%.
Is CVE-2025-69515 actively exploited?
No confirmed active exploitation of CVE-2025-69515 as of 2026-07-06.
How do I remediate CVE-2025-69515?
Priority: IMMEDIATE.
What systems are affected by CVE-2025-69515?
CVE-2025-69515 affects: Android.
Vulnerability Details
CVE IDCVE-2025-69515
BSIDBS-2026-GLOBAL-270048-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Published2026-04-07
Last Modified2026-07-05
ICS Relevance0%
Weakness (CWE)
CWE-941
SourceNVD
Official Description

An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to force the infotainment system into accepting falsified GPS signals as legitimate, resulting in the device reporting an incorrect or static location.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The attack vector involves sending malicious GPS signals to the infotainment system, which the system incorrectly accepts as legitimate.

Exploitation Likelihood: HIGH

Affected Products
VendorProductFixed Version
Android — —
Remediation

No patch URL on record. Monitor vendor security advisories directly.

Threat Intelligence
● Threat Intelligence Validated: July 2026 | Threat Age: 109 Days
CISA KEVNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
SAGE Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hashbc2e4f58af57c97675d7e79479651869941de1f31861288e3f0c0da09353762b17cad350a1a0c624740237646e5b15706c8f5d057f2ce07c2e2c6670d0112afb
Related CVEs affecting Android
CVE-2023-4617 10.0 Incorrect authorization vulnerability in HTTP POST method in Govee Home appli... CVE-2024-12402 9.8 The Themes Coder – Create Android & iOS Apps For Your Woocommerce Site plugin... CVE-2026-30496 9.8 The Optoma CinemaX P2 projector (firmware TVOS-04.24.010.04.01, Android 8.0.0... CVE-2024-53931 9.1 The com.glitter.caller.screen (aka iCaller, Caller Theme & Dialer) applicatio... CVE-2024-53932 9.1 The com.remi.colorphone.callscreen.calltheme.callerscreen (aka Color Phone: C...
View all Android CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.1 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Check Your Assets Free →