VulnerabilityDeferred

CVE-2025-44525

This issue allows attackers to cause a Denial of Service (DoS) via a crafted LL_Length_Req packet.

MEDIUM 6.5EPSS 0.18%

Does this matter?

Lower severity and a low EPSS score (0.18%). Track it; it rarely justifies an emergency change on its own.

Description

Texas Instruments CC2652RB LaunchPad SimpleLink CC13XX CC26XX SDK 7.41.00.17 was discovered to utilize insufficient permission checks on critical fields within Bluetooth Low Energy (BLE) data packets. This issue allows attackers to cause a Denial of Service (DoS) via a crafted LL_Length_Req packet.

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.18% probability · 7th percentile
CISA KEV: Not listed
Weakness: CWE-284
Source: cve@mitre.org

References

https://github.com/yangting111/BLE_TEST/blob/main/result/PoC/TI/Length_Req_MaxRxBytes.md

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.