PT-2025-9263 · Unknown · Bluetooth Stack

Published 2025-03-03 · Updated 2025-03-04 · CVE-2025-20649

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bluetooth Stack SW (affected versions not specified)

Description The issue is related to a missing permission check in the Bluetooth Stack SW, which could lead to remote information disclosure. This can be exploited without additional execution privileges and does not require user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-280

Related Identifiers

BDU:2025-08991

CVE-2025-20649

Affected Products

Bluetooth Stack

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-20649 · Security Note
• https://corp.mediatek.com/product-security-bulletin/March-2025 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-08991 · Security Note
• https://osv.dev/vulnerability/CVE-2025-20649 · Vendor Advisory
• https://t.me/cvenotify/113400 · Telegram Post
• https://twitter.com/CVEnew/status/1896399731032490072 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1896427928876986483 · Twitter Post
• https://t.me/cvenotify/113050 · Telegram Post
• https://t.me/cvedetector/19296 · Telegram Post