CVE-2025-10457
BaseFortify
Publication date: 2025-09-19
Last updated on: 2025-10-29
Assigner: Zephyr Project
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| zephyrproject | zephyr | to 4.1.0 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-358 | The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability occurs because the function that handles Bluetooth Low Energy (BLE) connection responses does not check if a response is actually expected, meaning it does not verify if the device initiated a connection request. Instead, it only checks if the identifier matches, which can lead to improper handling of connection responses.
How can this vulnerability impact me? :
The vulnerability can lead to denial of service or disruption of BLE connections since the function may accept unexpected connection responses, potentially causing instability or interruption in BLE communication.