CVE-2025-67133

An issue in Hero Motocorp Vida V1 Pro 2.0.7 allows a local attacker to cause a denial of service via the BLE component

High · published January 9, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
42.2
In the wild
Unconfirmed
What it is

⚡ A local attacker can easily trigger a denial of service in Hero Motocorp's Vida V1 Pro 2.0.7 via the Bluetooth Low Energy (BLE) component. 🚨 Think of it like someone jamming the signal for a wireless headset, disrupting all communication and leaving you in silence when you need to connect. The BLE component's failure to handle unexpected input is allowing this disruption. This denial of service could leave your device unresponsive, essentially throwing a wrench in the works of your connected experience. Imagine not being able to use key features or access your settings just when you need them the most!

Put simply

Think of it like someone jamming the signal for a wireless headset, disrupting all communication and leaving you in silence when you need to connect. The BLE component's failure to handle unexpected input is allowing this disruption. The vulnerability arises from the BLE component's inability to properly manage certain inputs, making it susceptible to denial of service attacks by local attackers who can exploit this flaw.

What to do

This denial of service could leave your device unresponsive, essentially throwing a wrench in the works of your connected experience. Imagine not being able to use key features or access your settings just when you need them the most! To mitigate this vulnerability, update your Hero Motocorp Vida V1 Pro to version 2.0.8 as soon as possible. Additionally, consider implementing stricter input validation on the BLE component to prevent similar issues in the future. You've got this! By following these steps, you'll be well on your way to securing your device. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00503 · 42.2th percentile
Published
2026-01-09T00:00Z
EPSS history
Timeline
  • 09 JAN 00:00Z
    An issue in Hero Motocorp Vida V1 Pro 2.0.7 allows a local attacker to cause a denial of service via the BLE component
    cvelistv5