CVE-2025-69515
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to force the infotainment system into accepting falsified GPS signals as legitimate, resulting in the device reporting an incorrect or static location.
Risk Assessment
An attacker can manipulate the vehicle's location, potentially leading to incorrect navigation or disruption of GPS-dependent systems.
Recommendation
Contact the manufacturer for a firmware update that validates the authenticity of GPS signals.
Other vulnerabilities in JXL 9 Inch Car Android Double Din Player
See all- CVE-2025-63895High
A vulnerability in the Bluetooth firmware of the JXL 9 Inch Car Android Double Din Player running Android 12.0 allows an attacker to cause a Denial of Service (DoS) by sending a crafted Link Manager Protocol (LMP) packet.
- CVE-2025-63896High
A vulnerability in the Bluetooth HID module of JXL 9 Inch Car Android Double Din Player running Android 12.0 allows an attacker to inject arbitrary keystrokes by spoofing a Bluetooth HID device.
Original NVD description (English source)
An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to force the infotainment system into accepting falsified GPS signals as legitimate, resulting in the device reporting an incorrect or static location.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS