CVE-2025-44525

Texas Instruments CC2652RB LaunchPad SimpleLink CC13XX CC26XX SDK 7.41.00.17 was discovered to utilize insufficient permission checks on critical fields within Bluetooth Low Energy (BLE) data packets. This issue allows attackers to cause a Denial of Service (DoS) via a crafted LL_Length_Req packet.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.18% chance of exploitation in the next 30 days, 7th percentile

Published

2025-07-09

Updated

2026-07-05

Proof-of-concept exploits (1)

• yangting111/BLE_TEST/blob/main/result/PoC/TI/Length_Req_MaxRxBytes.md

References

• CVE Record
• NVD entry

Related

• CVE-2024-53406
• CVE-2025-44526
• CVE-2025-44528
• CVE-2025-44531
• CVE-2025-44557
• CVE-2025-44559