CVE-2025-10456CWE-190

CVE-2025-10456

High · published September 19, 2025

CVSS v3.1
7.1
EPSS
0%
Percentile
10.8
In the wild
Unconfirmed
What it is

A vulnerability was identified in the handling of Bluetooth Low Energy (BLE) fixed channels (such as SMP or ATT). Specifically, an attacker could exploit a flaw that causes the BLE target (i.e., the device under attack) to attempt to disconnect a fixed channel, which is not allowed per the Bluetooth specification. This leads to undefined behavior, including potential assertion failures, crashes, or memory corruption, depending on the BLE stack implementation.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00211 · 10.8th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2025-09-19T10:15Z
Affected products (1)
ProductVersionsFixed in
zephyrproject/zephyr≤ 4.1.0—
References (1)
EPSS history
Timeline
  • 19 SEP 05:21Z
    Bluetooth: Semi-Arbitrary ability to make the BLE Target send disconnection requests
    cvelistv5