A vulnerability classified as problematic has been found in Bharti Airtel Thanks App 4.105.4 on Android. Affected is an unknown function of the file /Android/data/com.myairtelapp/files/. The manipulation leads to cleartext storage in a file or on disk.
This vulnerability is traded as CVE-2025-6748. It is possible to launch the attack on the physical device. Furthermore, there is an exploit available.
The vendor was contacted early about this disclosure but did not respond in any way.
