PT-2025-50547 · Aqara · Aqara Hub M2+2

Chapoly1305 · Published 2025-12-10 · Updated 2025-12-14 · CVE-2025-65296

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Aqara Hub M2 version 4.3.6 0027 Aqara Hub M3 version 4.3.6 0025 Aqara Camera Hub G3 version 4.1.9 0027

Description The software contains NULL-pointer dereference issues in the JSON processing component. These issues can be exploited by providing malformed JSON inputs, leading to denial-of-service attacks.

Recommendations Aqara Hub M2 version 4.3.6 0027: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Aqara Hub M3 version 4.3.6 0025: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Aqara Camera Hub G3 version 4.1.9 0027: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2025-65296

Affected Products

Aqara Camera Hub G3

Aqara Hub M2

Aqara Hub M3

References · 5

• 🔥 https://github.com/Chapoly1305/myCVEReports/blob/main/Aqara/JSON-NULL-Dereference.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-65296 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-65296 · Security Note
• https://t.me/CVEtracker/39411 · Telegram Post
• https://twitter.com/CVEnew/status/2000248662275035162 · Twitter Post