HIGHCVSS 7.1Vulnerability

CVE-2025-10456

A vulnerability was identified in the handling of Bluetooth Low Energy (BLE) fixed channels (such as SMP or ATT). Specifically, an attacker could exploit a flaw that causes the BLE target (i.e., the device under attack) to attempt to disconnect a fixed channel, which is not allowed per the Bluetooth specification. This leads to undefined behavior, including potential assertion failures, crashes, or memory corruption, depending on the BLE stack implementation.

Properties

Severity
HIGH
Epss score
0.00211
Cvss severity
HIGH
Cvss score
7.1
Retrieved at
2026-10-21T01:24:47+00:00
Last source
FIRST EPSS
Score
7.1
Cve id
CVE-2025-10456
Cvss vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
First seen by Signal
2026-10-14T00:10:04+00:00
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Published at
2025-09-19T06:15:34.000
Last modified
2026-10-13T20:16:57.673
Epss percentile
0.10746

Related Entities (2)

AFFECTS_PRODUCT (1)

HAS_WEAKNESS (1)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2025-10456 (CVSS 7.1) — Ninja Signal Threat Intelligence | Ninja Signal