CVE-2025-10458

CVE-2025-10458 affects Zephyr Project RTOS Bluetooth; the issue is that the Bluetooth LE connection response (le_conn_rsp) does not sanitize/validate CID, MTU, and MPS values, which are used in internal operations. Public sources describe that improper handling of these parameters can enable info...