CVE-2025-25758

Summary

CVE-2025-25758 is a vulnerability discovered in KukuFM Android version 1.12.7 (11207). This issue grants attackers unrestricted access to sensitive cleartext data, as a result of the android:allowBackup="true" setting in the AndroidManifest.xml file being misconfigured. Attackers can exploit this vulnerability to gain unauthorized access to the affected device, potentially leading to theft or manipulation of sensitive information. Users of KukuFM Android are urged to update to a patched version to mitigate this risk. The misconfiguration of the android:allowBackup setting inadvertently exposes data that should have been protected, providing attackers with an entry point into the device.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.