PT-2025-22888 · Apache · Apache Nuttx

Chongqing Lei + 1 · Published 2025-05-26 · Updated 2025-07-08 · CVE-2025-35003

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache NuttX versions 7.25 through 12.9.0

Description Improper Restriction of Operations within the Bounds of a Memory Buffer and Stack-based Buffer Overflow vulnerabilities were discovered in Apache NuttX RTOS Bluetooth Stack (HCI and UART components) that may result in system crash, denial of service, or arbitrary code execution, after receiving maliciously crafted packets.

Recommendations To resolve the issue, users of the NuttX Bluetooth HCI/UART stack are advised to upgrade to version 12.9.0, which fixes the identified implementation issues. As a temporary workaround, consider disabling the vulnerable Bluetooth HCI/UART stack components until a patch is available. Restrict access to the Bluetooth stack to minimize the risk of exploitation. Avoid using the vulnerable components in the Bluetooth stack until the issue is resolved.

Fix

DoS

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

CVE-2025-35003

Affected Products

Apache Nuttx

References · 14

• https://github.com/apache/nuttx/pull/16179 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-35003 · Security Note
• https://lists.apache.org/thread/k4xzz3jhkx48zxw9vwmqrmm4hmg78vsj · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-35003 · Vendor Advisory
• https://twitter.com/Carlos_LopezMkt/status/1928044909002465635 · Twitter Post
• https://t.me/cvenotify/123614 · Telegram Post
• https://twitter.com/cracbot/status/1928043700405354717 · Twitter Post
• https://twitter.com/cracbot/status/1928406081023181310 · Twitter Post
• https://t.me/cvenotify/127962 · Telegram Post
• https://twitter.com/CVEnew/status/1926953325984915608 · Twitter Post
• http://openwall.com/lists/oss-security/2025/05/26/1 · Note
• https://t.me/cvetracker/24631 · Telegram Post
• https://twitter.com/cracbot/status/1928768467043299455 · Twitter Post
• https://twitter.com/oss_security/status/1926828415048356058 · Twitter Post