CVE-2025-9558: Bluetooth: Mesh: Out-of-Bound Write in gen_prov_start
Published Nov 26, 2025
·Updated
There is a potential OOB Write vulnerability in the genprovstart function in pbadv.c. The full length of the received data is copied into the link.rx.buf receiver buffer without any validation on the data size.
Affected Software
1 affected component
Zephyr Project Zephyr Bluetooth Mesh
Event History
Nov 26, 2025
CVE Published
via MITRE·05:39 AM
Data Sourced
via MITRE·05:39 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-9558?
CVE-2025-9558 has a severity rating of 7.6, categorized as high.
2
What type of vulnerability is CVE-2025-9558?
CVE-2025-9558 is an out-of-bounds write vulnerability found in the gen_prov_start function.
3
How can I mitigate CVE-2025-9558?
Mitigation for CVE-2025-9558 involves implementing proper validation of the data size before copying data into the receiver buffer.
4
What systems are affected by CVE-2025-9558?
CVE-2025-9558 affects systems utilizing Bluetooth Mesh technology with the gen_prov_start function in pb_adv.c.
5
What is the potential impact of CVE-2025-9558?
The potential impact of CVE-2025-9558 includes denial of service due to an out-of-bounds write, which can disrupt normal operation.