CVE-2025-10457 — Bluetooth: Out-Of-Context le_conn_rsp Handling
The function responsible for handling BLE connection responses does not verify whether a response is expected—that is, whether the device has initiated a connection request. Ins…
Published: 2025-09-19 · CVSS: 4.3 · CVSS 3.1
The function responsible for handling BLE connection responses does not verify whether a response is expected—that is, whether the device has initiated a connection request. Instead, it relies solely on identifier matching.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7