Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2025-10457

Bluetooth: Out-Of-Context le_conn_rsp Handling

Description

The function responsible for handling BLE connection responses does not verify whether a response is expected—that is, whether the device has initiated a connection request. Instead, it relies solely on identifier matching.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

zephyrproject-rtos Zephyr

Default version status: unaffected

  • * to < 4.3.0affected

References