CVE-2025-20672CWE-122

In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check

Critical · published June 2, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
49.8
In the wild
Unconfirmed
What it is

🚨 An out-of-bounds write in the Bluetooth driver could let an attacker escalate privileges locally, all without needing user interaction! 🔥 Think of this as a sneaky trick where someone bypasses the first layer of security, like a delivery person leaving a package at the wrong address—opening the possibility for anyone nearby to claim it! 📦 An attacker could exploit this vulnerability to gain elevated privileges on the system, enabling them to execute arbitrary commands or access sensitive data—all while the legitimate user remains blissfully unaware. This could lead to a cascade of security breaches that would be absolutely devastating!

Put simply

Think of this as a sneaky trick where someone bypasses the first layer of security, like a delivery person leaving a package at the wrong address—opening the possibility for anyone nearby to claim it! 📦 This vulnerability arises from an incorrect bounds check in the Bluetooth driver, allowing for an out-of-bounds write. This flaw could potentially grant local users elevated privileges unexpectedly, which poses a significant risk.

What to do

An attacker could exploit this vulnerability to gain elevated privileges on the system, enabling them to execute arbitrary commands or access sensitive data—all while the legitimate user remains blissfully unaware. This could lead to a cascade of security breaches that would be absolutely devastating! Immediate action is required: patch your system using the Patch ID WCNCR00412257 to close this gap. Also, consider reviewing and restricting Bluetooth access where possible to minimize risk until the patch is applied. You've got this! Follow these steps to secure your system, and you'll be a security hero in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00635 · 49.8th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2025-06-02T02:29Z
EPSS history
Timeline
  • 02 JUN 02:29Z
    In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check
    cvelistv5