CVE-2025-9557

CVE-2025-9557 is documented as a Bluetooth Mesh vulnerability: an out-of-bounds write in gen_prov_cont can enable arbitrary code execution, or cause a crash and DoS on Zephyr-based devices. Affected: Zephyr RTOS Bluetooth Mesh components; root cause is an out-of-bound write. Exploitation status i...

CVE-2025-9557 Bluetooth: Mesh: Out-of-Bound Write in gen_prov_cont

‭An out-of-bound write can lead to an arbitrary code execution. Even on devices with some form of memory protection, this can still lead to‬ ‭a crash and a resultant denial of service.‬...