Cloudanix VulnDB

CVE-2025-15385

Critical · 9.8

CVSS

9.8

EPSS

0.2%

Published

Jan 6, 2026

CISA due date

—

The record

Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63.

Affected packages

Ecosystem Package Introduced Fixed