Bluetooth Messaging Vulnerability in Harman Firmware
CVE-2025-41725

6.5MEDIUM

Key Information:

Vendor

Harman International

Status
Flip 4
Vendor
CVE Published:
13 November 2026

What is CVE-2025-41725?

Devices running Harman firmware versions before 4.1.0 are susceptible to Denial of Service attacks due to malformed Bluetooth messages sent by unauthenticated attackers. This can result in unexpected crashes and unavailability of the affected devices, posing significant risks to users relying on Bluetooth functionality.

Affected Version(s)

Flip 4 0.0.0 < 4.1.0

References

https://harman.csaf-tp.certvde.com/.well-known/csaf/white...
x_csafvendor-advisory
https://certvde.com/en/advisories/VDE-2025-090/
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Justus W. Perlwitz from JWP Consulting
.