cveboard RSS feed

CVE-2025-9135

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2025
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Verkehrsauskunft Österreich SmartRide/cleVVVer/BusBahnBim/Salzburg Verkehr AndroidManifest.xml improper export of android application components

A vulnerability was detected in Verkehrsauskunft Österreich SmartRide, cleVVVer, BusBahnBim and Salzburg Verkehr up to 12.1.1(258) on Android. The impacted element is an unknown function of the file AndroidManifest.xml. The manipulation results in improper export of android application components. The attack must be initiated from a local position. The exploit is now public and may be used. Upgrading to version 12.1.2(259) is sufficient to resolve this issue. Upgrading the affected component is recommended. The vendor was contacted early and fixed the issue by "[r]emoving the task affinity of the app so it can't be copied".

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

SmartRide

Vendor
Verkehrsauskunft Österreich
Product
SmartRide
Platforms
Unknown
Default status
Unknown
SmartRide · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
12.1.1(258)affectedUnavailableUnavailableUnavailableNone listed
12.1.2(259)unaffectedUnavailableUnavailableUnavailableNone listed

cleVVVer

Vendor
Verkehrsauskunft Österreich
Product
cleVVVer
Platforms
Unknown
Default status
Unknown
cleVVVer · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
12.1.1(258)affectedUnavailableUnavailableUnavailableNone listed
12.1.2(259)unaffectedUnavailableUnavailableUnavailableNone listed

BusBahnBim

Vendor
Verkehrsauskunft Österreich
Product
BusBahnBim
Platforms
Unknown
Default status
Unknown
BusBahnBim · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
12.1.1(258)affectedUnavailableUnavailableUnavailableNone listed
12.1.2(259)unaffectedUnavailableUnavailableUnavailableNone listed

Salzburg Verkehr

Vendor
Verkehrsauskunft Österreich
Product
Salzburg Verkehr
Platforms
Unknown
Default status
Unknown
Salzburg Verkehr · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
12.1.1(258)affectedUnavailableUnavailableUnavailableNone listed
12.1.2(259)unaffectedUnavailableUnavailableUnavailableNone listed