CVE-2025-44531

HighCVSS 7.5

Published: 24/06/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

33th percentile - higher than 33% of all known CVEs

Summary

A vulnerability in the Realtek RTL8762E SDK for the RTL8762EKF-EVB board allows an attacker to cause a Denial of Service (DoS) by sending a crafted packet before the pairing public key is received during a Bluetooth connection attempt.

Risk Assessment

An attacker can remotely crash or hang the device using the vulnerable SDK, disrupting Bluetooth services and potentially the entire system.

Recommendation

Update the RTL8762E SDK to the latest patched version and consider implementing packet validation mechanisms before establishing Bluetooth connections.

Other vulnerabilities in Realtek RTL8762E SDK

CVE-2025-44526Medium
The Realtek RTL8762E SDK V1.4.0 was found to have insufficient permission checks on critical fields in Bluetooth Low Energy (BLE) data packets. This vulnerability allows an attacker to cause a Denial of Service (DoS) via a crafted LL_Length_Req packet.

Original NVD description (English source)

An issue in Realtek RTL8762EKF-EVB RTL8762E SDK v1.4.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted before a pairing public key is received during a Bluetooth connection attempt.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS