CVE-2025-10456: Bluetooth: Semi-Arbitrary ability to make the BLE Target send disconnection requests
A vulnerability was identified in the handling of Bluetooth Low Energy (BLE) fixed channels (such as SMP or ATT). Specifically, an attacker could exploit a flaw that causes the BLE target (i.e., the device under attack) to attempt to disconnect a fixed channel, which is not allowed per the Bluetooth specification. This leads to undefined behavior, including potential assertion failures, crashes, or memory corruption, depending on the BLE stack implementation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10456?
CVE-2025-10456 is considered a medium severity vulnerability.
How do I fix CVE-2025-10456?
To fix CVE-2025-10456, update your Zephyr project to version 4.1.1 or later.
What software is affected by CVE-2025-10456?
CVE-2025-10456 affects Zephyr versions up to and including 4.1.0.
What type of attack is possible due to CVE-2025-10456?
An attacker could exploit CVE-2025-10456 to disrupt Bluetooth communication on fixed channels.
Is there a known exploit for CVE-2025-10456?
There are no publicly known exploits for CVE-2025-10456 at this time.