CVE-2025-1698

LowCVSS 2.8/10Last modified Jun 17, 2026

Description

Null pointer exception vulnerabilities were reported in the fingerprint sensor service that could allow a local attacker to cause a denial of service.

Metrics

CVSS 3.1 2.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
Motorola	Razr 40 Ultra	< 2025-06-01
Motorola	Razr 40	< 2025-06-01
Motorola	Razr 2023	< 2025-06-01
Motorola	Edge 40 Pro	< 2025-06-01
Motorola	Edge+ 2023	< 2025-06-01

References

https://en-us.support.motorola.com/app/answers/detail/a_id/186728

Timeline

Published: Jun 11, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-16992.8An incorrect default permissions vulnerability was reported in the MotoSignature application that could result in unauthorized access.CVE-2025-17007.0A DLL hijacking vulnerability was reported in the Motorola Software Fix (Rescue and Smart Assistant) installer that could allow a local atta CVE-2025-17018.9CVE-2025-1701 is a high-severity vulnerability in the MIM Admin service. An attacker could exploit this vulnerability by sending a specially CVE-2025-17027.5The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is v CVE-2025-17036.4The Ultimate Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘content’ parameter in all versions up to, and CVE-2025-17046.5ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access t CVE-2025-17056.1The tagDiv Composer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.3. This is due CVE-2025-17067.5Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.CVE-2025-17078.8The Review Schema plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.4 via post meta. This CVE-2025-17087.5The application is vulnerable to SQL injection attacks. An attacker is able to dump the PostgreSQL database and read its content.CVE-2025-17096.5Several credentials for the local PostgreSQL database are stored in plain text (partially base64 encoded).CVE-2025-17109.8The maxView Storage Manager does not implement sufficient measures to prevent multiple failed authentication attempts within a short time fr