CVE-2025-21615 — AAT allows data exfiltration by other apps installed on the same device

CVE-2025-21615

AAT allows data exfiltration by other apps installed on the same device PUBLISHED

Description (CNA)

AAT (Another Activity Tracker) is a GPS-tracking application for tracking sportive activities, with emphasis on cycling. Versions lower than v1.26 of AAT are vulnerable to data exfiltration from malicious apps installed on the same device.

Affected (CNA)

Vendor / product	Versions
bailuk / AAT	affected < 1.26

CWE

CWE-200

References

https://github.com/bailuk/AAT/security/advisories/GHSA-pwpm-x58v-px5c

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.