CVE-2025-32235
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Apr 4, 2025
Updated: Apr 7, 2025
CWE ID 862
Summary
CVE-2025-32235 is a vulnerability affecting the Sonaar MP3 Audio Player for Music, Radio & Podcast. This issue involves missing authorization, allowing unauthorized access to certain functionalities. The security flaw arises from incorrectly configured access control security levels. This vulnerability impacts versions of the MP3 Audio Player from n/a through 5.9.4. Successful exploitation could potentially enable attackers to gain unauthorized access to various features of the player, posing a risk to user privacy and system security.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.