CVE-2025-25730 Security feature bypass in n/a

Medium 4.6 Published Updated

Physically proximate attackers can bypass USB debugging restrictions to gain control of the Motorola Droid Razr HD device.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Local or same network only
Victim action needed
Not needed
Fix
None listed

What is CVE-2025-25730?

CVE-2025-25730 is a medium-severity vulnerability in n/a, published on 27 Feb 2025. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An issue in Motorola Mobility Droid Razr HD (Model XT926) System Version: 9.18.94.XT926.Verizon.en.US allows physically proximate unauthorized attackers to access USB debugging, leading to control of the host device itself.

Weakness: CWE-284

Which versions are affected by CVE-2025-25730?

How do I fix CVE-2025-25730?

No fix has been published for CVE-2025-25730 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-25730 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-25730 exists.

Sources

Also known as GHSA-h33c-355w-g26q.

Is CVE-2025-25730 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free