CVE-2025-47370

MediumCVSS 6.5/10Last modified Oct 18, 2026

Description

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-617

Affected software

No affected versions have been published.

Timeline

Published
Nov 4, 2025
Last modified
Oct 18, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-473716.5Transient DOS when an LTE RLC packet with invalid TB is received by UE.CVE-2025-473728.4Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.CVE-2025-473737.8Memory Corruption when accessing buffers with invalid length during TA invocation.CVE-2025-473746.5Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.CVE-2025-473757.8Memory corruption while handling different IOCTL calls from the user-space simultaneously.CVE-2025-473767.8Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.CVE-2025-473777.8Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.CVE-2025-473787.1Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.CVE-2025-473797.8Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffCVE-2025-47389.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yirmibes Software MY ERP allows SQL InCVE-2025-473807.8Memory corruption while preprocessing IOCTLs in sensors.CVE-2025-473817.8Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs.
CVE-2025-47370: Medium severity, CVSS 6.5 | Vulnix