Use-After-Free Vulnerability in Zephyr Project's Bluetooth Stack

CVE-2025-7403

What is CVE-2025-7403?

The Zephyr Project's Bluetooth stack contains a vulnerability due to unsafe handling in the bt_conn_tx_processor that can lead to a use-after-free scenario. This vulnerability allows an attacker to gain control over a portion of memory, specifically enabling them to manipulate four bytes of data, leading to precise memory corruption. Such weaknesses can be exploited to execute arbitrary code or disrupt normal operations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References