CVE-2026-65933CWE-126

CVE-2026-65933

published August 13, 2026

CVSS

5.3

EPSS

Percentile

15.5

In the wild

Unconfirmed

What it is

A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below.

The record

Technical detail

CVSS: 5.3 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00251 · 15.5th percentile
Weakness: CWE-126 · Buffer Over-read
Published: 2026-08-13T19:19Z

References (2)

https://arxiv.org/pdf/2409.02905 · [email protected]https://community.silabs.com/068Vm00000x0Yqy · [email protected]

EPSS history

Timeline

13 AUG 14:22Z
BT122 malformed packet with increased length field causes memory leak
cvelistv5