CVE-2024-2105CWE-1287

JBL: Improper validation of ICM field in connection requests

Medium · published December 10, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
9.1
In the wild
Unconfirmed
What it is

An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00198 · 9.1th percentile
Weakness
CWE-1287 · Improper Validation of Specified Type of Input
Published
2025-12-10T13:01Z
EPSS history
Timeline
  • 10 DEC 13:01Z
    JBL: Improper validation of ICM field in connection requests
    cvelistv5