CVE-2025-69515
Critical · 9.1CVSS
9.1
EPSS
0.5%
Published
Apr 7, 2026
CISA due date
—
The record
An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to force the infotainment system into accepting falsified GPS signals as legitimate, resulting in the device reporting an incorrect or static location.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-72506 VoiceTra provided by National Institute of Information and Communications Technology… CWE-941
- CVE-2026-69246 Guzzle is an extensible PHP HTTP client. CWE-941
- CVE-2026-40118 UDP Console provided by Arcserve contains an incorrectly specified destination in a… CWE-941
- CVE-2025-53899 Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication… CWE-941
- CVE-2024-29415 The ip package through 2.0.1 for Node.js might allow SSRF because some IP addresses (such… CWE-941