This issue was addressed with improved checks in Apple Music Classical 2.3 for Android. An app may be able to unexpectedly leak a user’s credentials, posing a risk to user security. The vulnerability has been classified as medium severity due to its potential impact on confidentiality.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2025-43201 |
Exploitation
To exploit this vulnerability, an attacker would need local access to the device running Apple Music Classical 2.3 for Android. By leveraging the app’s unexpected behavior, the attacker could potentially extract user credentials without requiring any special privileges or user interaction.
Affected Products
- Apple Music Classical 2.3 for Android: This version contains the vulnerability that may lead to credential leakage.
Mitigation
To mitigate this vulnerability, users should update to the latest version of Apple Music Classical, which includes improved checks to prevent credential leakage. Regularly updating applications and monitoring for security advisories can help protect against similar vulnerabilities.