high7.5
CVE-2025-48705
An issue was discovered in COROS PACE 3 through 3.0808.0.
Impact
An issue was discovered in COROS PACE 3 through 3.0808.0. Due to a NULL pointer dereference vulnerability, sending a crafted BLE message forces the device to reboot.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yftech | Coros Pace 3 Firmware | through 3.0808.0 |