CVE-2025-41725

CVSS 6.5 (medium) · published 2026-11-13

Affected devices running firmware versions prior to 4.1.0 may crash and become unavailable when receiving specific malformed Bluetooth messages from an unauthenticated attacker.

Weakness: CWE-923

Source: NVD CVE-2025-41725

References

• https://certvde.com/en/advisories/VDE-2025-090/
• https://harman.csaf-tp.certvde.com/.well-known/csaf/white/2026/hbsa-2025-0003.json

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.