CVE-2025-12035 | THREATINT

Description

An integer overflow condition exists in Bluetooth Host stack, within the bt_br_acl_recv routine a critical path for processing inbound BR/EDR L2CAP traffic.

PUBLISHED Reserved 2025-10-21 | Published 2025-12-15 | Updated 2025-12-15 | Assigner zephyr

MEDIUM: 6.5CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Problem types

Integer Overflow or Wraparound

Product status

Default status

unaffected

* (git)

affected

References

github.com/...zephyr/security/advisories/GHSA-p793-3456-h7w3

cve.org (CVE-2025-12035)

nvd.nist.gov (CVE-2025-12035)

Download JSON