Critical · published June 20, 2025
🚨 A crafty BLE message can trigger a full reboot of the COROS PACE 3, and that’s exactly what makes this vulnerability a ticking time bomb! 🔥 Think of it like a remote control that, when pressed just right, makes your favorite gadget shut down unexpectedly — frustrating and completely unexpected! Just like that gadget, your device’s stability is at stake here. An attacker could send a specially crafted BLE message, causing the device to reboot unexpectedly. This could lead to user disorientation during critical activities, potentially putting their safety at risk. With such a significant impact, the stakes couldn't be higher!
Think of it like a remote control that, when pressed just right, makes your favorite gadget shut down unexpectedly — frustrating and completely unexpected! Just like that gadget, your device’s stability is at stake here. This out-of-bounds read vulnerability in COROS PACE 3 allows attackers to exploit the device by sending malformed Bluetooth Low Energy (BLE) messages, leading to unwanted reboots.
An attacker could send a specially crafted BLE message, causing the device to reboot unexpectedly. This could lead to user disorientation during critical activities, potentially putting their safety at risk. With such a significant impact, the stakes couldn't be higher! Swiftly update your COROS PACE 3 to the latest version (3.0809.0) to close this critical security gap. Additionally, regularly monitor your device settings to ensure secure communication practices. You've got this! By updating now, you're stepping up to protect both yourself and your tech! 🛡️