PT-2025-51278 · Bluetooth · Bluetooth

Published 2025-12-15 · Updated 2025-12-21 · CVE-2025-12035

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Bluetooth (affected versions not specified)

Description An integer overflow condition exists in the Bluetooth Host stack, specifically within the bt br acl recv routine. This routine is a critical path for processing inbound BR/EDR L2CAP traffic. The integer overflow could potentially lead to unexpected behavior or system instability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2025-12035

GHSA-P793-3456-H7W3

Affected Products

Bluetooth

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-12035 · Security Note
• https://osv.dev/vulnerability/CVE-2025-12035 · Vendor Advisory
• https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-p793-3456-h7w3 · Note
• https://twitter.com/CVEnew/status/2002857385904558570 · Twitter Post