CVE-2025-65296CWE-476

CVE-2025-65296

Medium · published December 11, 2025

CVSS v3.1

6.5

EPSS

Percentile

19.8

In the wild

Unconfirmed

What it is

NULL-pointer dereference vulnerabilities in Aqara Hub M2 4.3.6_0027, Hub M3 4.3.6_0025, and Camera Hub G3 4.1.9_0027 in the JSON processing enable denial-of-service attacks through malformed JSON inputs.

The record

Technical detail

CVSS v3.1: 6.5 · MEDIUM
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0: Not supplied
EPSS: 0.00284 · 19.8th percentile
Weakness: CWE-476 · NULL Pointer Dereference
Published: 2025-12-11T03:16Z

Affected products (3)

Product	Versions	Fixed in
aqara/hub_m2_firmware	all versions	—
aqara/hub_m3_firmware	all versions	—
aqara/camera_hub_g3_firmware	all versions	—

References (1)

https://github.com/Chapoly1305/myCVEReports/blob/main/Aqara/JSON-NULL-Dereference.md · [email protected]

EPSS history

Timeline

10 DEC 00:00Z
NULL-pointer dereference vulnerabilities in Aqara Hub M2 4.3.6_0027, Hub M3 4.3.6_0025, and Camera Hub G3 4.1.9_0027 in the JSON processing enable…
cvelistv5