The application contains a Cleartext Transmission of Sensitive Information flaw, allowing a network adversary to intercept and alter data sent in plain text. This weakness may expose confidential user data or corrupt transactions, compromising confidentiality and integrity of the communication. The underlying vulnerability maps to CWE‑319, which highlights insufficient cryptographic protection during data transmission.

The affected product is the Android application “あんしんフィルター for au” distributed by KDDI CORPORATION. No version range is specified, so any current installation of the app is potentially vulnerable.

The CVSS score of 6.3 indicates a moderate severity. The EPSS score is not available, so the current likelihood of exploitation is unclear; however, the vulnerability allows a widely feasible man‑in‑the‑middle attack over unencrypted channels. It is not listed in CISA’s KEV catalog, indicating no confirmed public exploitation yet. Existence of the flaw means that attackers who can position themselves in the user’s network path can read or modify traffic without additional privileges.