Unrated severityNVD Advisory· Published May 26, 2025· Updated Feb 26, 2026
Apache NuttX RTOS: NuttX Bluetooth Stack HCI and UART DoS/RCE Vulnerabilities.
CVE-2025-35003
Description
Improper Restriction of Operations within the Bounds of a Memory Buffer and Stack-based Buffer Overflow vulnerabilities were discovered in Apache NuttX RTOS Bluetooth Stack (HCI and UART components) that may result in system crash, denial of service, or arbitrary code execution, after receiving maliciously crafted packets.
NuttX's Bluetooth HCI/UART stack users are advised to upgrade to version 12.9.0, which fixes the identified implementation issues.
This issue affects Apache NuttX: from 7.25 before 12.9.0.
Affected products
2- Apache Software Foundation/Apache NuttX RTOSv5Range: 7.25
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- github.com/apache/nuttx/pull/16179mitrepatch
- lists.apache.org/thread/k4xzz3jhkx48zxw9vwmqrmm4hmg78vsjmitrevendor-advisory
News mentions
0No linked articles in our index yet.