CVE-2025-47370

MediumCVSS 6.5

Published: 04/11/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

Transient DOS occurs when a remote device sends an invalid connection request during BT connectable LE scan.

Risk Assessment

A remote attacker could cause transient unavailability of the Bluetooth service by sending an invalid connection request. This may disrupt operation of devices using Bluetooth LE.

Recommendation

Apply the firmware or Bluetooth driver update provided by the vendor that addresses this vulnerability. Monitor the vendor's security advisories for the appropriate fix.

Other vulnerabilities in Bluetooth LE

CVE-2026-8676High
An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond.

Original NVD description (English source)

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS