Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-9135

A vulnerability was detected in Verkehrsauskunft Österreich SmartRide, cleVVVer, BusBahnBim and Salzburg Verkehr up to 12.1.1(258) on Android. The impacted element is an unknown function of the file AndroidManifest.xml. The manipulation results in improper export of android application components. The attack must be initiated from a local position. The exploit is now public and may be used. Upgrading to version 12.1.2(259) is sufficient to resolve this issue. Upgrading the affected component is
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:785389a51676e18c4c4639ddf073345e152bd1c2210f1dd86ac2441c7007fd31
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
2

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 4 assertions

{"product":"cleVVVer","vendor":"Verkehrsauskunft Österreich","versions":[{"status":"affected","version":"12.1.1(258)"},{"status":"unaffected","version":"12.1.2(259)"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/affected/1

{"product":"Salzburg Verkehr","vendor":"Verkehrsauskunft Österreich","versions":[{"status":"affected","version":"12.1.1(258)"},{"status":"unaffected","version":"12.1.2(259)"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/affected/3

{"product":"BusBahnBim","vendor":"Verkehrsauskunft Österreich","versions":[{"status":"affected","version":"12.1.1(258)"},{"status":"unaffected","version":"12.1.2(259)"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/affected/2

{"product":"SmartRide","vendor":"Verkehrsauskunft Österreich","versions":[{"status":"affected","version":"12.1.1(258)"},{"status":"unaffected","version":"12.1.2(259)"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/affected/0
cvss · 4 assertions

{"metric":{"baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C","version":"3.1"},"metric_type":"cvssV3_1"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/metrics/1/cvssV3_1

{"metric":{"baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C","version":"3.0"},"metric_type":"cvssV3_0"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/metrics/2/cvssV3_0

{"metric":{"baseScore":4.3,"vectorString":"AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C","version":"2.0"},"metric_type":"cvssV2_0"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/metrics/3/cvssV2_0

{"metric":{"baseScore":4.8,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","version":"4.0"},"metric_type":"cvssV4_0"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/metrics/0/cvssV4_0

Affected products and versions

4 source assertions
{"product":"cleVVVer","vendor":"Verkehrsauskunft Österreich","versions":[{"status":"affected","version":"12.1.1(258)"},{"status":"unaffected","version":"12.1.2(259)"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/affected/1
{"product":"Salzburg Verkehr","vendor":"Verkehrsauskunft Österreich","versions":[{"status":"affected","version":"12.1.1(258)"},{"status":"unaffected","version":"12.1.2(259)"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/affected/3
{"product":"BusBahnBim","vendor":"Verkehrsauskunft Österreich","versions":[{"status":"affected","version":"12.1.1(258)"},{"status":"unaffected","version":"12.1.2(259)"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/affected/2
{"product":"SmartRide","vendor":"Verkehrsauskunft Österreich","versions":[{"status":"affected","version":"12.1.1(258)"},{"status":"unaffected","version":"12.1.2(259)"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/affected/0

Provider-owned CVSS observations

4 source assertions
{"metric":{"baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/metrics/1/cvssV3_1
{"metric":{"baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C","version":"3.0"},"metric_type":"cvssV3_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/metrics/2/cvssV3_0
{"metric":{"baseScore":4.3,"vectorString":"AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C","version":"2.0"},"metric_type":"cvssV2_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/metrics/3/cvssV2_0
{"metric":{"baseScore":4.8,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","version":"4.0"},"metric_type":"cvssV4_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/metrics/0/cvssV4_0

CWE assertions

1 source assertion
{"cweId":"CWE-926","description":"Improper Export of Android Application Components","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/problemTypes/0/descriptions/0

Source references

9 source assertions
{"tags":["related"],"url":"https://github.com/KMov-g/androidapps/blob/main/de.hafas.android.vvt.md"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/references/5
{"tags":["exploit"],"url":"https://github.com/KMov-g/androidapps/blob/main/de.hafas.android.vvt.md"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/adp/0/references/0
{"tags":["exploit"],"url":"https://github.com/KMov-g/androidapps/blob/main/de.hafas.android.vvt.md#steps-to-reproduce"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/adp/0/references/1
{"tags":["exploit"],"url":"https://github.com/KMov-g/androidapps/blob/main/de.hafas.android.vvt.md#steps-to-reproduce"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/references/6
{"name":"VDB-320515 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"],"url":"https://vuldb.com/?ctiid.320515"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/references/1
{"name":"VDB-320515 | Verkehrsauskunft Österreich SmartRide/cleVVVer/BusBahnBim/Salzburg Verkehr AndroidManifest.xml improper export of android application components","tags":["vdb-entry","technical-description"],"url":"https://vuldb.com/?id.320515"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/references/0
{"name":"Submit #615276 | Verkehrsauskunft Österreich SmartRide 12.1.1(258) Task Hijacking","tags":["third-party-advisory"],"url":"https://vuldb.com/?submit.615276"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/references/2
{"name":"Submit #615278 | Verkehrsauskunft Österreich cleVVVer(de.hafas.android.vvv) 12.1.1(258) Task Hijacking (Duplicate)","tags":["third-party-advisory"],"url":"https://vuldb.com/?submit.615278"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/references/3
{"name":"Submit #628235 | Verkehrsauskunft Österreich BusBahnBim(de.hafas.android.stv) 12.1.1(258) Hijacking (Duplicate)","tags":["third-party-advisory"],"url":"https://vuldb.com/?submit.628235"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:34c164eb1ce334c92d68c3d0db53e57534b5447b871de84ceab3efed8c99860f · sha256:6e63bda7c12df57c… · /containers/cna/references/4

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer