CVE-2019-15948: Ti CC256XB-Bt-SP Firmware

High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Texas Instruments CC256x and WL18xx dual-mode Bluetooth controller devices, when LE scan mode is used, allow remote attackers to trigger a buffer overflow via a malformed Bluetooth Low Energy advertising packet, to cause a denial of service or potentially execute arbitrary code. This affects CC256xC-BT-SP 1.2, CC256xB-BT-SP 1.8, and WL18xx-BT-SP 4.4.

Affected products

• Ti CC256XB-Bt-SP Firmware: up to and including 1.8
• Ti CC256XC-Bt-SP Firmware: up to and including 1.2
• Ti WL18XX-Bt-SP Firmware: up to and including 4.4

Published 2019-11-13. Last modified 2026-06-17.