CVE-2025-44964 describes a vulnerability in BlueStacks v5.20 where SSL certificate validation is not properly performed. This weakness enables attackers to conduct man-in-the-middle attacks, potentially intercepting and obtaining sensitive data transmitted by the application. The CVSS 3.1 base score is 3.9, reflecting low severity with attack vector being adjacent network, high attack complexity, and requiring high privileges. No known exploits are reported in the wild. No patch or remediation information is currently available.

The vulnerability allows an attacker positioned on an adjacent network to intercept communications by exploiting the lack of SSL certificate validation. This can lead to disclosure of sensitive information and limited integrity and availability impacts. The overall impact is low severity as per CVSS scoring.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid using BlueStacks v5.20 in untrusted network environments where man-in-the-middle attacks are possible.