What is CVE-2025-21615?

CVE-2025-21615 is a medium-severity vulnerability in Bailuk Aat, classified under Information Disclosure. CVSS score: 5.5/10. Published 2025-01-06.

How severe is CVE-2025-21615?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Information disclosure in Bailuk Aat

CVE-2025-21615

AAT (Another Activity Tracker) is a GPS-tracking application for tracking sportive activities, with emphasis on cycling. Versions lower than v1.26 of AAT are vulnerable to data exfiltration from malicious apps installed on the same device.

Vulnerability class: Information Disclosure

EPSS: 0.002 (6.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N.

Affected products

Bailuk Aat — versions < 1.26

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

security-advisories@github.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2025-21615?: CVE-2025-21615 is a medium-severity vulnerability in Bailuk Aat, classified under Information Disclosure. CVSS score: 5.5/10. Published 2025-01-06.
How severe is CVE-2025-21615?: Medium severity. CVSS v3 base score is 5.5 out of 10.