CVE-2025-63896: Jxlindia Jxl 9 Inch Car Android Double Din Player Firmware

High severity, CVSS 7.6. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue in the Bluetooth Human Interface Device (HID) of JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to inject arbitrary keystrokes via a spoofed Bluetooth HID device.

Affected products

• Jxlindia Jxl 9 Inch Car Android Double Din Player Firmware: version 12.0 only

Published 2025-12-04. Last modified 2026-07-05.