VulnerabilityDeferred

CVE-2025-12035

An integer overflow condition exists in Bluetooth Host stack, within the bt_br_acl_recv routine a critical path for processing inbound BR/EDR L2CAP traffic.

MEDIUM 6.5EPSS 0.20%

Does this matter?

Lower severity and a low EPSS score (0.20%). Track it; it rarely justifies an emergency change on its own.

Description

An integer overflow condition exists in Bluetooth Host stack, within the bt_br_acl_recv routine a critical path for processing inbound BR/EDR L2CAP traffic.

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.20% probability · 10th percentile
CISA KEV: Not listed
Weakness: CWE-190
Source: vulnerabilities@zephyrproject.org

References

https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-p793-3456-h7w3

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.