CVE-2025-44528

HighCVSS 7.5

Published: 23/06/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

Summary

A vulnerability in Texas Instruments SimpleLink CC13XX CC26XX SDK version 7.41.00.17 allows an attacker to cause a Denial of Service (DoS) by sending a crafted LL_Pause_Enc_Req packet during the authentication and connection phase.

Risk Assessment

This attack can disrupt the operation of devices using this SDK, leading to unavailability of IoT services or systems based on these chips.

Recommendation

Update the SimpleLink CC13XX CC26XX SDK to the latest patched version and consider implementing packet filtering mechanisms in the network.

Other vulnerabilities in SimpleLink CC13XX CC26XX SDK

CVE-2025-44525Medium
Insufficient permission checks on critical fields within Bluetooth Low Energy (BLE) data packets were discovered in Texas Instruments CC2652RB LaunchPad SimpleLink CC13XX CC26XX SDK 7.41.00.17. This vulnerability allows an attacker to cause a Denial of Service (DoS) via a crafted LL_Length_Req packet.

Original NVD description (English source)

An issue in Texas Instruments LP-CC2652RB SimpleLink CC13XX CC26XX SDK 7.41.00.17 allows attackers to cause a Denial of Service (DoS) via sending a crafted LL_Pause_Enc_Req packet during the authentication and connection phase, causing a Denial of Service (DoS).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS