CVE-2025-11644

Name of the Vulnerable Software and Affected Versions Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074

Description A weakness exists in the UART Interface component of Tomofun Furbo 360 and Furbo Mini. Manipulation of this component can result in insecure storage of sensitive information. The attack requires physical access to the device and is considered difficult to exploit. The exploit has been publicly released.

Recommendations Update Tomofun Furbo 360 to a version later than FB0035 FW 036. Update Tomofun Furbo Mini to a version later than MC0020 FW 074.