Use-After-Free Vulnerability in Zephyr Project's Bluetooth Stack

CVE-2025-7403

What is CVE-2025-7403?

The Zephyr Project's Bluetooth stack contains a vulnerability due to unsafe handling in the bt_conn_tx_processor that can lead to a use-after-free scenario. This vulnerability allows an attacker to gain control over a portion of memory, specifically enabling them to manipulate four bytes of data, leading to precise memory corruption. Such weaknesses can be exploited to execute arbitrary code or disrupt normal operations.

References