medium4.3
CVE-2025-10457
The function responsible for handling BLE connection responses does not verify whether a response is expected—that is, whether the device has initiated a conne…
Impact
The function responsible for handling BLE connection responses does not verify whether a response is expected—that is, whether the device has initiated a connection request. Instead, it relies solely on identifier matching.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zephyrproject | Zephyr | through 4.1.0 |