CVE-2025-21615
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Jan 6, 2025
CWE ID 200
Summary
CVE-2025-21615 is a vulnerability affecting the Another Activity Tracker (AAT) application, specifically versions below 1.26. Malicious apps installed on the same device can exploit this issue to exfiltrate data from AAT, posing a risk to users' privacy and security. This vulnerability is significant as AAT is widely used for tracking sportive activities, particularly cycling. The full impact of this issue is still under investigation, but it is recommended that users update their AAT application to the latest version to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- AAT