What is CVE-2025-15385?

CVE-2025-15385 is a critical-severity vulnerability in Tecno Boomplay, classified under Insufficient Verification of Data Authenticity. CVSS score: 9.8/10. Published 2026-01-06.

How severe is CVE-2025-15385?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Tecno Boomplay

CVE-2025-15385

Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63.

EPSS: 0.002 (10.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Tecno Boomplay
Tecno Mobile Com.afmobi.boomplayer — versions 7.4.63

Weakness classification (CWE)

CWE-345 — Insufficient Verification of Data Authenticity

References

907edf6c-bf03-423e-ab1a-8da27e1aa1ea (Vendor Advisory)

Frequently asked questions

What is CVE-2025-15385?: CVE-2025-15385 is a critical-severity vulnerability in Tecno Boomplay, classified under Insufficient Verification of Data Authenticity. CVSS score: 9.8/10. Published 2026-01-06.
How severe is CVE-2025-15385?: Critical severity. CVSS v3 base score is 9.8 out of 10.