Yftech vulnerabilities
We track 6 vulnerabilities in Yftech products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on June 20, 2025.
Latest Yftech vulnerabilities
- 9.1 Critical severity
Coros Pace 3 Firmware: Out-of-bounds Read
An issue was discovered in COROS PACE 3 through 3.0808.0. Due to an out-of-bounds read vulnerability, sending a crafted BLE message forces the device to reboot.
- 7.5 High severity
Coros Pace 3 Firmware: NULL Pointer Dereference
An issue was discovered in COROS PACE 3 through 3.0808.0. Due to a NULL pointer dereference vulnerability, sending a crafted BLE message forces the device to reboot.
- 9.8 Critical severity
Coros Pace 3 Firmware: Cleartext Transmission of Sensitive Information
An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. With WLAN access, the COROS Pace 3 downloads firmware files via HTTP. However, the communication is not encrypted and allows sniffing and
- 8.8 High severity
Coros Pace 3 Firmware: Improper Authentication
An issue was discovered on COROS PACE 3 devices through 3.0808.0. It starts advertising if no device is connected via Bluetooth. This allows an attacker to connect with the device via BLE if no other device is connected. While connected, none of the BLE servic
- 9.8 Critical severity
Coros Pace 3 Firmware: Improper Certificate Validation
An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. This function is mainly for downloading firmware files. Before downloading firmware files, the watch requests some information about the
- 9.8 Critical severity
Coros Pace 3 Firmware: Improper Authentication
An issue was discovered on COROS PACE 3 devices through 3.0808.0. It identifies itself as a device without input or output capabilities, which results in the use of the Just Works pairing method. This method does not implement any authentication, which therefo