CVE-2025-63895

An issue in the Bluetooth firmware of JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to cause a Denial of Service (DoS) via sending a…

High · published December 10, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
22.9
In the wild
Unconfirmed
What it is

⚡ A crafted packet is all it takes to throw your JXL 9 Inch Car Android Double Din Player into chaos! 🚗💥 Think of it like a car's Bluetooth system being distracted by a rogue radio signal, causing it to go haywire and refuse to connect — a Denial of Service that leaves you in silence on the road! With this vulnerability, an attacker could send a specially crafted Link Manager Protocol (LMP) packet, leading to a complete loss of Bluetooth functionality. Imagine cruising down the highway, and suddenly your favorite jams vanish, leaving you in awkward silence — absolutely devastating for your driving experience!

Put simply

Think of it like a car's Bluetooth system being distracted by a rogue radio signal, causing it to go haywire and refuse to connect — a Denial of Service that leaves you in silence on the road! This vulnerability in the Bluetooth firmware allows attackers to cause a Denial of Service by sending malicious LMP packets, effectively crashing the Bluetooth service on the device without needing authentication.

What to do

With this vulnerability, an attacker could send a specially crafted Link Manager Protocol (LMP) packet, leading to a complete loss of Bluetooth functionality. Imagine cruising down the highway, and suddenly your favorite jams vanish, leaving you in awkward silence — absolutely devastating for your driving experience! To mitigate this issue, update to the latest firmware version provided by the manufacturer as soon as it's available. Regularly check for updates and ensure your device settings are configured to reject unknown LMP packets. 🛡️ This is fixable! Follow these steps, and you'll be back to enjoying your tunes in no time! 🎉

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00312 · 22.9th percentile
Published
2025-12-10T00:00Z
EPSS history
Timeline
  • 10 DEC 00:00Z
    An issue in the Bluetooth firmware of JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to cause a Denial of Service (DoS) via sending a…
    cvelistv5