CVE-2025-10457: Bluetooth: Out-Of-Context le_conn_rsp Handling
The function responsible for handling BLE connection responses does not verify whether a response is expected—that is, whether the device has initiated a connection request. Instead, it relies solely on identifier matching.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10457?
CVE-2025-10457 is classified as a medium severity vulnerability due to its potential for unauthorized BLE connection handling.
How do I fix CVE-2025-10457?
To fix CVE-2025-10457, ensure that you upgrade to Zephyr version 4.1.1 or later, which contains the necessary security enhancements.
What systems are affected by CVE-2025-10457?
CVE-2025-10457 affects all versions of the Zephyr Project up to and including version 4.1.0.
What type of vulnerability is CVE-2025-10457?
CVE-2025-10457 is a security flaw in the BLE connection response handling mechanism that lacks proper verification.
What are the potential consequences of exploiting CVE-2025-10457?
Exploiting CVE-2025-10457 may allow an attacker to gain unauthorized access to devices by sending false BLE connection responses.