CVE-2014-7759: The Jazz Lovers Radio (aka com.nobexinc.wls_99273254.rc) application 3.2.3 for Android does not verify X.50...

Security readout for executives and security teams

CVE-2014-7759 describes an Android radio app that did not properly verify SSL/TLS certificates. A network-positioned attacker could impersonate the app’s server using a crafted certificate and potentially capture sensitive information. The bundle names Jazz Lovers Radio 3.2.3, but does not provide CVSS, vendor fix, or active exploitation evidence. Exposure appears limited to Android devices with Jazz Lovers Radio 3.2.3 installed. Risk is highest when devices use untrusted or attacker-controlled networks. The provided affected-product metadata is incomplete and lists vendor/product/version as n/a, so broader exposure cannot be confirmed from this bundle. Prioritize if the organization managed Android devices, customer kiosks, or staff phones used this app. Business risk is targeted data exposure over hostile networks, not broad remote compromise. Because fix information is missing, focus on inventory, removal, and replacement decisions. Mitigation focus: Inventory Android devices for the named package and version.; Check app vendor or app-store guidance for fixed versions.; Remove or replace the app if no maintained fixed version exists..

Prepared

Jun 14, 2026, 06:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.