Read the docs
TI-2025-08375 Aliases CVE-2025-9135GHSA-9v3x-rmcf-rhp4

Verkehrsauskunft Österreich SmartRide/cleVVVer/BusBahnBim/Salzburg Verkehr…

Priority MEDIUM 55CWE-926Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

A vulnerability was detected in Verkehrsauskunft Österreich SmartRide, cleVVVer, BusBahnBim and Salzburg Verkehr up to 12.1.1(258) on Android. The impacted element is an unknown function of the file AndroidManifest.xml. The manipulation results in improper export of android application components. The attack must be initiated from a local position. The exploit is now public and may be used. Upgrading to version 12.1.2(259) is sufficient to resolve this issue. Upgrading the affected component is recommended. The vendor was contacted early and fixed the issue by "[r]emoving the task affinity of the app so it can't be copied".

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00274 19th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD and the CNA
Fix Fixed SmartRide (Verkehrsauskunft Österreich): 12.1.2(259)cleVVVer (Verkehrsauskunft Österreich): 12.1.2(259)+2 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Verkehrsauskunft ÖsterreichSmartRide12.1.1(258)12.1.2(259)Patch availableCNA
Verkehrsauskunft ÖsterreichcleVVVer12.1.1(258)12.1.2(259)Patch availableCNA
Verkehrsauskunft ÖsterreichBusBahnBim12.1.1(258)12.1.2(259)Patch availableCNA
Verkehrsauskunft ÖsterreichSalzburg Verkehr12.1.1(258)12.1.2(259)Patch availableCNA
  • SmartRide VendorVerkehrsauskunft Österreich Affected 12.1.1(258) Fixed in 12.1.2(259) Patch available CNA
  • cleVVVer VendorVerkehrsauskunft Österreich Affected 12.1.1(258) Fixed in 12.1.2(259) Patch available CNA
  • BusBahnBim VendorVerkehrsauskunft Österreich Affected 12.1.1(258) Fixed in 12.1.2(259) Patch available CNA
  • Salzburg Verkehr VendorVerkehrsauskunft Österreich Affected 12.1.1(258) Fixed in 12.1.2(259) Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:verkehrsauskunft:smartride:*:*:*:*:*:android:*:*before 12.1.2\(259\)VulnerableVerkehrsauskunft
  • cpe:2.3:a:verkehrsauskunft:smartride:*:*:*:*:*:android:*:* Versions before 12.1.2\(259\) Vulnerable ·Verkehrsauskunft

Remediation

  • Fix · CNA SmartRide (Verkehrsauskunft Österreich) Fixed in 12.1.2(259)
  • Fix · CNA cleVVVer (Verkehrsauskunft Österreich) Fixed in 12.1.2(259)
  • Fix · CNA BusBahnBim (Verkehrsauskunft Österreich) Fixed in 12.1.2(259)
  • Fix · CNA Salzburg Verkehr (Verkehrsauskunft Österreich) Fixed in 12.1.2(259)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-9135
  2. 2026-10-03 Alias added: GHSA-9v3x-rmcf-rhp4

References

Exploit 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences