CVE-2025-10458: Bluetooth: le_conn_rsp does not sanitize CID, MTU, MPS values
Published Sep 19, 2025
·Updated
Parameters are not validated or sanitized, and are later used in various internal operations.
Affected Software
1 affected component
zephyrproject zephyr<=4.1.0
Event History
Sep 19, 2025
CVE Published
via MITRE·05:20 AM
Data Sourced
via MITRE·05:20 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-10458?
CVE-2025-10458 has been classified with a moderate severity level due to the lack of parameter validation and sanitization.
2
How do I fix CVE-2025-10458?
To fix CVE-2025-10458, ensure proper validation and sanitization of parameters used in internal operations.
3
What versions of Zephyr are affected by CVE-2025-10458?
CVE-2025-10458 affects all versions of Zephyr up to and including version 4.1.0.
4
What type of vulnerability is CVE-2025-10458?
CVE-2025-10458 is identified as a parameter validation vulnerability.
5
Can CVE-2025-10458 lead to further exploitation?
Yes, CVE-2025-10458 can potentially lead to further exploitation if the parameters are not properly handled.