CVE-2025-69515

CVE-2025-69515 is a GPS spoofing vulnerability affecting the JXL 9 Inch Car Android Double Din Player running Android v12.0. The flaw allows attackers to force the infotainment system to accept falsified GPS signals as legitimate input, causing the device to report incorrect or static location data. The vulnerability carries a CRITICAL severity rating with a CVSS score of 9.1, driven by its network-based attack vector, low complexity, and lack of required privileges or user interaction. The impact is primarily on integrity and availability, as attackers can manipulate location reporting without authentication. The EPSS score of 0.0005 indicates very low current exploitation prevalence. There is no evidence of active exploitation or public exploit code availability at this time. The vulnerability is not included on the CISA Known Exploited Vulnerabilities list and shows no community activity on the Hot List. However, the high CVSS score warrants monitoring and prioritization for patching, particularly for vehicles or fleet operations relying on accurate GPS functionality from these infotainment systems.