---
id: "CVE-2025-41725"
page: "https://infrastack.ai/live/CVE-2025-41725"
kind: "vulnerability"
aliases: ["CVE-2025-41725"]
title: "Devices on firmware before 4.1.0 crash on malformed Bluetooth messages"
severity: "medium"
cvss: 6.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["bluetooth", "firmware", "infrastructure", "iot-devices"]
not_affected_if: ["bluetooth-disabled", "firmware-4.1.0-or-later"]
published_at: "2026-11-13T13:17:38+00:00"
first_seen_at: "2026-11-13T13:46:51+00:00"
updated_at: "2026-11-13T13:48:01+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-41725", "first_seen_at": "2026-11-13T13:46:51+00:00"}]
exploit_sources: []
---

# Devices on firmware before 4.1.0 crash on malformed Bluetooth messages

Link for people: https://infrastack.ai/live/CVE-2025-41725 (this .md is for agents)

Affected devices running firmware older than 4.1.0 can crash and stop working when they receive specific malformed Bluetooth messages. An unauthenticated attacker nearby can cause the outage without any credentials.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the device's current firmware version in its admin or settings screen and compare it with `4.1.0`

## Fix

- Move affected devices to firmware `4.1.0` or later

## Timeline

- 2026-11-13T13:46:51+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2025-41725

## From the sources

Affected devices running firmware versions prior to 4.1.0 may crash and become unavailable when receiving specific malformed Bluetooth messages from an unauthenticated attacker.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_