CVE-2025-7403: Bluetooth: bt_conn_tx_processor unsafe handling
Published Sep 19, 2025
·Updated
Unsafe handling in btconntxprocessor causes a use-after-free, resulting in a write-before-zero. The written 4 bytes are attacker-controlled, enabling precise memory corruption.
Affected Software
1 affected component
zephyrproject zephyr<=4.1.0
Event History
Sep 19, 2025
CVE Published
via MITRE·05:19 AM
Data Sourced
via MITRE·05:19 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-7403?
CVE-2025-7403 has a high severity due to the potential for memory corruption and exploitation.
2
How do I fix CVE-2025-7403?
To fix CVE-2025-7403, you should upgrade to Zephyr version 4.2.0 or later where the vulnerability has been addressed.
3
What causes CVE-2025-7403?
CVE-2025-7403 is caused by unsafe handling in the bt_conn_tx_processor leading to a use-after-free condition.
4
What types of systems are affected by CVE-2025-7403?
CVE-2025-7403 affects systems running Zephyr versions up to and including 4.1.0.
5
What are the potential impacts of CVE-2025-7403?
The potential impacts of CVE-2025-7403 include arbitrary memory corruption and possible remote code execution.