CVE-2025-44525

MEDIUM

Texas Instruments CC2652RB LaunchPad SimpleLink CC13XX CC26XX SDK 7...

Title source: llm

Description

Texas Instruments CC2652RB LaunchPad SimpleLink CC13XX CC26XX SDK 7.41.00.17 was discovered to utilize insufficient permission checks on critical fields within Bluetooth Low Energy (BLE) data packets. This issue allows attackers to cause a Denial of Service (DoS) via a crafted LL_Length_Req packet.

References (3)

Core 3

Core References

Various Sources

http://cc2652rb.com

Various Sources

http://texas.com

Various Sources

https://github.com/yangting111/BLE_TEST/blob/main/result/PoC/TI/Length_Req_MaxRxBytes.md

View Writeup ZIP pw:eip

Scores

CVSS v3 6.5

EPSS 0.0011

EPSS Percentile 29.3%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-284

Status published

Published Jul 09, 2025

Tracked Since Feb 18, 2026