CVE-2021-31785: Actions-Semi ATS2815 Firmware

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

The Bluetooth Classic implementation on Actions ATS2815 and ATS2819 chipsets does not properly handle the reception of multiple LMP_host_connection_req packets, allowing attackers in radio range to trigger a denial of service (deadlock) of the device via crafted LMP packets. Manual user intervention is required to restart the device and restore Bluetooth communication.

Affected products

• Actions-Semi ATS2815 Firmware: affected versions not specified
• Actions-Semi ATS2819 Firmware: affected versions not specified
• Actions-Semi ATS2819P Firmware: affected versions not specified
• Actions-Semi ATS2819S Firmware: affected versions not specified
• Actions-Semi ATS2819T Firmware: affected versions not specified

Published 2021-09-07. Last modified 2026-06-17.