Sensitive Information Exposure in Android Application for PAY Region
CVE-2025-52580

2.4LOW

Key Information:

Vendor

Gift Pad Co.,ltd.

Status
"region Pay" App For Android
Vendor
CVE Published:
22 July 2025

What is CVE-2025-52580?

A vulnerability exists in the PAY App for Android, allowing sensitive user information to be potentially logged and accessible. Versions prior to 1.5.28 are affected, posing a risk of exposure to unauthorized users who gain access to the application logs. This issue highlights the importance of securing application logging practices to prevent data breaches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

"region PAY" App for Android prior to 1.5.28

References

https://jvn.jp/en/jp/JVN07825095/

CVSS V4

Score:
2.4
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
2.4
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.