Bootloader Vulnerability in Flock Safety Bravo Edge AI Compute Device
CVE-2025-59404

7.5HIGH

Key Information:

Vendor

Flock Safety

Status
Bravo Edge AI Compute Device
Vendor
CVE Published:
25 September 2025

What is CVE-2025-59404?

The Flock Safety Bravo Edge AI Compute Device, specifically version BRAVO_00.00_local_20241017, is shipped with an unlocked bootloader. This vulnerability allows attackers to bypass the Android Verified Boot (AVB) mechanism, leading to potential unauthorized modifications of device partitions. This poses significant risks to the integrity and security of the device, as it opens the door for malicious actors to manipulate system files and compromise sensitive functionalities.

References

https://gainsec.com/wp-content/uploads/2025/09/Root-from-...
https://www.flocksafety.com/products
https://www.flocksafety.com/products/license-plate-readers

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.