CVE-2025-69515 describes a vulnerability in the JXL 9 Inch Car Android Double Din Player with Android v12.0 where attackers can force the infotainment system to accept falsified GPS signals as legitimate. This manipulation leads to the device reporting incorrect or static location information. The CVSS score is 9.1 (critical), indicating a network attack vector with low complexity, no privileges or user interaction required, and impacts on integrity and availability. No patch or remediation guidance is currently available, and no known exploits are reported in the wild.

The vulnerability allows attackers to compromise the integrity of the GPS location data reported by the infotainment system, potentially causing incorrect or static location reporting. This can disrupt navigation and location-based services, impacting user experience and safety. The availability of location services may also be affected due to the acceptance of falsified signals.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should be cautious about relying on GPS data from the affected device. Monitor vendor communications for updates on patches or mitigations.