Vulnerability in Bluetooth Low Energy (BLE) fixed channels (CVE-2025-10456)
Summary
Vulnerability in Bluetooth Low Energy (BLE) fixed channels (CVE-2025-10456). Risk of unauthorized operations or information disclosure.
Original description
The description as published by the source.
A vulnerability was identified in the handling of Bluetooth Low Energy (BLE) fixed channels (such as SMP or ATT). Specifically, an attacker could exploit a flaw that causes the BLE target (i.e., the device under attack) to attempt to disconnect a fixed channel, which is not allowed per the Bluetooth specification. This leads to undefined behavior, including potential assertion failures, crashes, or memory corruption, depending on the BLE stack implementation.
Source: NIST National Vulnerability Database NVD
AI summary
Written by an external AI model and may contain mistakes. Check the original description and references below before acting on it.
Bluetooth Low Energy（BLE）の固定チャネルの処理に脆弱性が発見されました。攻撃者はBLEターゲットを不正に動作させ、アサート失敗、クラッシュ、メモリ破損を引き起こす可能性があります。この脆弱性はBLEスタックの実装に依存します。
Bluetooth Low Energy（BLE）の固定チャネルにおける処理の脆弱性
BLEの固定チャネル（SMPやATTなど）の処理
攻撃者がBLEターゲットをクラッシュさせたり、メモリ破損を引き起こす可能性があるため重要
BLEスタックの修正を適用する必要があります。詳細は提供されているパッチURLを参照してください。
情報なし
情報なし