CVE-2025-25758

Name of the Vulnerable Software and Affected Versions KukuFM Android version 1.12.7

Description The issue allows attackers to access sensitive cleartext data through the android:allowBackup="true" setting in the AndroidManifest.xml file. This setting potentially exposes data to unauthorized access.

Recommendations For KukuFM Android version 1.12.7, consider setting android:allowBackup="false" in the AndroidManifest.xml file to prevent unauthorized access to sensitive data. As a temporary workaround, restrict access to the app's data storage to minimize the risk of exploitation.