CVE-2025-44528: High severity Texas Instruments SimpleLink CC13XX CC26XX SDK vulnerability

Published Jun 23, 2025

Updated

An issue in Texas Instruments LP-CC2652RB SimpleLink CC13XX CC26XX SDK 7.41.00.17 allows attackers to cause a Denial of Service (DoS) via sending a crafted LLPauseEncReq packet during the authentication and connection phase, causing a Denial of Service (DoS).

Affected Software

1 affected component

Texas Instruments SimpleLink CC13XX CC26XX SDK

Event History

Jun 23, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-44528?

CVE-2025-44528 has a high severity rating due to its ability to cause Denial of Service (DoS) during the authentication process.

How do I fix CVE-2025-44528?

To fix CVE-2025-44528, update the Texas Instruments SimpleLink CC13XX CC26XX SDK to the latest version that addresses this vulnerability.

What type of attacks can exploit CVE-2025-44528?

CVE-2025-44528 can be exploited by attackers who send crafted LL_Pause_Enc_Req packets, causing a denial of service.

Who is affected by CVE-2025-44528?

Devices using the Texas Instruments SimpleLink CC13XX CC26XX SDK 7.41.00.17 are affected by CVE-2025-44528.

When was CVE-2025-44528 reported?

CVE-2025-44528 was reported due to security vulnerabilities discovered in the SimpleLink CC13XX CC26XX SDK.