VulnerabilityDeferred

CVE-2025-21615

Versions lower than v1.26 of AAT are vulnerable to data exfiltration from malicious apps installed on the same device.

MEDIUM 5.5EPSS 0.17%

Does this matter?

Lower severity and a low EPSS score (0.17%). Track it; it rarely justifies an emergency change on its own.

Description

AAT (Another Activity Tracker) is a GPS-tracking application for tracking sportive activities, with emphasis on cycling. Versions lower than v1.26 of AAT are vulnerable to data exfiltration from malicious apps installed on the same device.

CVSS 3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS: 0.17% probability · 7th percentile
CISA KEV: Not listed
Weakness: CWE-200
Source: security-advisories@github.com

References

https://github.com/bailuk/AAT/security/advisories/GHSA-pwpm-x58v-px5c

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.