CVE-2025-2818

Severity: low (CVSS 3.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-07-17 · updated 2026-06-17
Weakness: CWE-319

Description

A vulnerability was reported in version 1.0 of the Bluetooth Transmission Alliance protocol adopted by Motorola Smart Connect Android Application that could allow a nearby attacker within the Bluetooth interaction range to intercept files when transferred to a device not paired in Smart Connect.

Affected products

Motorola Smart Connect Android Application: before 08.0.1.011.0 — fixed in 08.0.1.011.0

How to fix

Upgrade to a fixed version: Motorola Smart Connect Android Application 08.0.1.011.0. Check the vendor advisory for mitigations.

References

https://en-us.support.motorola.com/app/answers/detail/a_id/186727
https://support.lenovo.com/us/en/product_security/LEN-188742

Get alerted when CVE-2025-2818 or the next vulnerability affects your stack