CVE-2025-44526

MediumCVSS 6.5/10Last modified Jul 5, 2026

Description

Realtek RTL8762EKF-EVB RTL8762E SDK V1.4.0 was discovered to utilize insufficient permission checks on critical fields within Bluetooth Low Energy (BLE) data packets. This issue allows attackers to cause a Denial of Service (DoS) via a crafted LL_Length_Req packet.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20 CWE-284

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/yangting111/BLE_TEST/blob/main/result/PoC/Realtek/Improper_Validation_of_BLE_PDU_Length.mdExploit, Third Party Advisory

Timeline

Published: Jul 9, 2025
Last modified: Jul 5, 2026
NVD status: Modified

Related CVEs from 2025

CVE-2025-445287.5An issue in Texas Instruments LP-CC2652RB SimpleLink CC13XX CC26XX SDK 7.41.00.17 allows attackers to cause a Denial of Service (DoS) via se CVE-2025-44539.8A vulnerability was found in D-Link DIR-619L 2.04B04. It has been classified as critical. This affects the function formSysCmd. The manipula CVE-2025-445317.5An issue in Realtek RTL8762EKF-EVB RTL8762E SDK v1.4.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted before a pa CVE-2025-44549.8A vulnerability was found in D-Link DIR-619L 2.04B04. It has been declared as critical. This vulnerability affects the function wake_on_lan.CVE-2025-44557.0A vulnerability was found in Patch My PC Home Updater up to 5.1.3.0. It has been rated as critical. This issue affects some unknown processi CVE-2025-445578.1A state machine transition flaw in the Bluetooth Low Energy (BLE) stack of Cypress PSoC4 v3.66 allows attackers to bypass the pairing proces CVE-2025-445596.5An issue in the Bluetooth Low Energy (BLE) stack of Realtek RTL8762E BLE SDK v1.4.0 allows attackers within Bluetooth range to cause a Denia CVE-2025-44569.8A vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Affected is an unknown function of the file CVE-2025-445609.8owntone-server 2ca10d9 is vulnerable to Buffer Overflow due to lack of recursive checking.CVE-2025-44579.8A vulnerability classified as critical was found in Project Worlds Car Rental Project 1.0. Affected by this vulnerability is an unknown func CVE-2025-44588.8A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. Affected by this vulnerab CVE-2025-44598.8A vulnerability was found in code-projects Patient Record Management System 1.0. It has been rated as critical. Affected by this issue is so