CVE-2019-19193: Ti Ble-Stack

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

The Bluetooth Low Energy peripheral implementation on Texas Instruments SIMPLELINK-CC2640R2-SDK through 3.30.00.20 and BLE-STACK through 1.5.0 before Q4 2019 for CC2640R2 and CC2540/1 devices does not properly restrict the advertisement connection request packet on reception, allowing attackers in radio range to cause a denial of service (crash) via a crafted packet.

Affected products

• Ti Ble-Stack: up to and including 1.5.0
• Ti CC2640R2 Software Development Kit: up to and including 3.30.00.20

Published 2020-02-10. Last modified 2026-06-17.