Bluetooth Low Energy Vulnerability in Zephyr's Stack

CVE-2025-10456

What is CVE-2025-10456?

A security flaw exists within the handling of fixed channels in the Bluetooth Low Energy (BLE) protocol utilized by the Zephyr Bluetooth stack. This vulnerability can allow an attacker to induce the BLE device to incorrectly attempt to disconnect a fixed channel, as permitted by the Bluetooth specification. The result can lead to unpredictable behavior, such as crashes, assertion failures, or memory corruption within the impacted device. Remediation should be sought through security updates provided by the vendor.

References