Description
Parameters are not validated or sanitized, and are later used in various internal operations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| zephyrproject-rtos | Zephyr | — | — |
High · 7.6
CVE-2025-10458
EUVD-2025-30239
Bluetooth: le_conn_rsp does not sanitize CID, MTU, MPS values
Published Sep 19, 2025 · Updated Oct 13, 2026 · Assigned by zephyr