This issue was addressed with improved checks. It is fixed in Apple Music Classical 2.3 for Android. An app may be able to unexpectedly leak a user’s credentials.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2025-43201 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the affected application. By leveraging the application’s unexpected behavior, the attacker could potentially extract user credentials without the user’s knowledge.
Affected Products
- Apple Music Classical 2.3 for Android: This version contains the fix for the credential leakage issue.
Mitigation
To mitigate this vulnerability, users should update to Apple Music Classical 2.3 for Android, which includes the necessary improvements to prevent credential leakage.