CVE-2021-31610: Bluetrum AB5376T Firmware

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

The Bluetooth Classic implementation on AB32VG1 devices does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service (either restart or deadlock the device) by flooding a device with LMP_AU_rand data.

Affected products

• Bluetrum AB5376T Firmware: affected versions not specified
• Bluetrum BT8896A Firmware: affected versions not specified
• Mi Mi True Wireless Earbuds Basic 2 Firmware: affected versions not specified

Published 2021-09-07. Last modified 2026-06-17.