{"id":55167,"date":"2025-06-26T08:59:55","date_gmt":"2025-06-26T08:59:55","guid":{"rendered":""},"modified":"2025-09-07T17:19:48","modified_gmt":"2025-09-07T23:19:48","slug":"cve-2025-32875-unencrypted-bluetooth-data-transmission-vulnerability-in-coros-application","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-32875-unencrypted-bluetooth-data-transmission-vulnerability-in-coros-application\/","title":{"rendered":"CVE-2025-32875: Unencrypted Bluetooth Data Transmission Vulnerability in COROS Application<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

A critical vulnerability, CVE-2025-32875, has been discovered in the COROS Android application up to version 3.8.12. This vulnerability is particularly concerning due to its potentially broad impact, affecting all users of the application who use Bluetooth pairing. As a result, any data sent via Bluetooth Low Energy (BLE) remains unencrypted, leaving it open to eavesdropping and potential misuse by attackers<\/a> within Bluetooth range.
\nThis vulnerability is significant since it exposes sensitive user<\/a> data to potential compromise. The failure of the application to enforce Bluetooth pairing and bonding, coupled with the lack of encryption for data transmitted via BLE, presents a notable risk to user privacy and data<\/a> security.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-32875
\nSeverity: Critical (9.8 CVSS Score)
\nAttack Vector: Network (Bluetooth)
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: System compromise or data<\/a> leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n