CVE-2025-6172CWE-287

Permission vulnerability in the mobile application (com.afmobi.boomplayer) may lead to the risk of unauthorized operation

Critical · published June 16, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
44.0
In the wild
Unconfirmed
What it is

🚨 A glaring permission flaw in the Boom Player mobile app lets unauthorized users perform actions they shouldn't! This is a security wake-up call! ⚡ Think of it like a hotel that forgets to lock some rooms — anyone could wander in and use the amenities without a key. This permission vulnerability lets unauthorized users access sensitive functions without proper authorization, posing a serious risk to your data. If exploited, attackers could perform unauthorized operations within the app, potentially leading to data leaks or even complete takeover of user accounts. This poses an absolutely devastating risk for users, as their private information could be compromised, and their app experience could be drastically altered by malicious activities!

Put simply

Think of it like a hotel that forgets to lock some rooms — anyone could wander in and use the amenities without a key. This permission vulnerability lets unauthorized users access sensitive functions without proper authorization, posing a serious risk to your data. This vulnerability allows unauthorized operations in the Boom Player app due to improper permission checks, enabling attackers to gain access to functionalities that should be restricted.

What to do

If exploited, attackers could perform unauthorized operations within the app, potentially leading to data leaks or even complete takeover of user accounts. This poses an absolutely devastating risk for users, as their private information could be compromised, and their app experience could be drastically altered by malicious activities! Developers need to patch this vulnerability immediately by updating the app to incorporate proper authorization checks and ensuring that permissions are strictly enforced. Regular audits should also be conducted to prevent similar issues from arising in the future. You've got this! By acting swiftly on these steps, you'll secure the app and protect your users! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00530 · 44.0th percentile
Weakness
CWE-287 · Improper Authentication
Published
2025-06-16T08:41Z
EPSS history
Timeline
  • 16 JUN 08:41Z
    Permission vulnerability in the mobile application (com.afmobi.boomplayer) may lead to the risk of unauthorized operation
    cvelistv5