HIGHCVSS 7.1Vulnerability
CVE-2025-10456
A vulnerability was identified in the handling of Bluetooth Low Energy (BLE) fixed channels (such as SMP or ATT). Specifically, an attacker could exploit a flaw that causes the BLE target (i.e., the device under attack) to attempt to disconnect a fixed channel, which is not allowed per the Bluetooth specification. This leads to undefined behavior, including potential assertion failures, crashes, or memory corruption, depending on the BLE stack implementation.
Properties
- Severity
- HIGH
- Epss score
- 0.00211
- Cvss severity
- HIGH
- Cvss score
- 7.1
- Retrieved at
- 2026-10-21T01:24:47+00:00
- Last source
- FIRST EPSS
- Score
- 7.1
- Cve id
- CVE-2025-10456
- Cvss vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
- First seen by Signal
- 2026-10-14T00:10:04+00:00
- Vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
- Published at
- 2025-09-19T06:15:34.000
- Last modified
- 2026-10-13T20:16:57.673
- Epss percentile
- 0.10746
Related Entities (2)
AFFECTS_PRODUCT (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph