Read the docs
TI-2025-01461 Aliases CVE-2025-1699GHSA-8vrc-phw3-jc6v

Incorrect default permissions in Motorola g34

Priority LOW 11CWE-276Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
Active
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

An incorrect default permissions vulnerability was reported in the MotoSignature application that could result in unauthorized access.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00129 2nd percentileScored 2026-11-07
Fix Fixed g34 (Motorola): 2025-06-01g34t (Motorola): 2025-06-01+1 more product

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Motorolag34before 2025-06-012025-06-01Patch availableCNA
Motorolag34tbefore 2025-06-012025-06-01Patch availableCNA
Motorolag45 5Gbefore 2025-06-012025-06-01Patch availableCNA
  • g34 VendorMotorola Affected before 2025-06-01 Fixed in 2025-06-01 Patch available CNA
  • g34t VendorMotorola Affected before 2025-06-01 Fixed in 2025-06-01 Patch available CNA
  • g45 5G VendorMotorola Affected before 2025-06-01 Fixed in 2025-06-01 Patch available CNA

Remediation

  • Fix · CNA g34 (Motorola) Fixed in 2025-06-01
  • Fix · CNA g34t (Motorola) Fixed in 2025-06-01
  • Fix · CNA g45 5G (Motorola) Fixed in 2025-06-01

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-1699
  2. 2026-10-03 Alias added: GHSA-8vrc-phw3-jc6v

References

  • TI-2013-02292 Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel… KEVCVSS 3.1HIGH 7.8
  • TI-2021-02526 OS command injection in Motorola Binatone Hubble Cameras CVSS 3.1HIGH 8.8
  • TI-2009-01326 Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote… CVSS 2.0HIGH 9.3
  • TI-2023-22228 An improper absolute path traversal vulnerability was reported for the Ready For… CVSS 3.1MEDIUM 6.5
  • TI-2007-04086 Multiple buffer overflows in Motorola Timbuktu Pro before 8.6.5 for Windows allow remote… CVSS 2.0HIGH 10.0
  • TI-2024-15650 Motorola MR2600 Authentication Bypass Vulnerability CVSS 3.1CRITICAL 9.6
See all 125 →

Sources