BaseFortify

Publication date: 2026-01-06

Last updated on: 2026-01-08

Assigner: TECNOMobile

Description

Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-06

Last Modified

2026-01-08

Generated

2026-07-06

AI Q&A

2026-01-06

EPSS Evaluated

2026-07-05

NVD

CVE-2025-15385

EUVD

EUVD-2026-0978

Affected Vendors & Products

Vendor	Product	Version / Range
tecno_mobile	com_afmobi_boomplayer	7.4.63

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-345	The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Attack-Flow Graph

Executive Summary

This vulnerability is an Insufficient Verification of Data Authenticity issue in the TECNO Mobile com.Afmobi.Boomplayer application (version 7.4.63). It allows an attacker to bypass authentication mechanisms, potentially gaining unauthorized access.

Impact Analysis

The vulnerability can impact you by allowing unauthorized users to bypass authentication controls in the affected application, which may lead to unauthorized access to user data or application functions.

Hi! I’m here to help you understand CVE-2025-15385. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70