CVE-2025-43201
BaseFortify
Publication date: 2025-08-15
Last updated on: 2025-08-21
Assigner: Apple Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| apple | music_classical | to 2.3 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-200 | The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves an issue in Apple Music Classical 2.3 for Android where an app may be able to unexpectedly leak a user's credentials. The problem was addressed by implementing improved checks to prevent this leakage.
How can this vulnerability impact me? :
If exploited, this vulnerability could lead to the unintended exposure of your credentials, potentially allowing unauthorized access to your account or personal information.
What immediate steps should I take to mitigate this vulnerability?
Update to Apple Music Classical 2.3 for Android, where this issue has been fixed with improved checks to prevent unexpected leakage of user credentials.