CVE-2025-63895
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A vulnerability in the Bluetooth firmware of the JXL 9 Inch Car Android Double Din Player running Android 12.0 allows an attacker to cause a Denial of Service (DoS) by sending a crafted Link Manager Protocol (LMP) packet.
Risk Assessment
An attacker can remotely crash or freeze the device, disabling the car radio and multimedia system, potentially creating a safety hazard while driving.
Recommendation
Update the Bluetooth firmware to the latest version provided by the manufacturer, and if no update is available, disable Bluetooth functionality if possible.
Other vulnerabilities in JXL 9 Inch Car Android Double Din Player
See all- CVE-2025-69515Critical
An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to force the infotainment system into accepting falsified GPS signals as legitimate, resulting in the device reporting an incorrect or static location.
- CVE-2025-63896High
A vulnerability in the Bluetooth HID module of JXL 9 Inch Car Android Double Din Player running Android 12.0 allows an attacker to inject arbitrary keystrokes by spoofing a Bluetooth HID device.
Original NVD description (English source)
An issue in the Bluetooth firmware of JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted Link Manager Protocol (LMP) packet.